Azure Certification Roadmap for 2026: Complete Career Path Guide
Cloud employers worldwide ask for Microsoft Azure certifications, and the list of exams changes often. The azure certification roadmap below shows which certifications to take and in what order. It covers Microsoft's certification structure, five career paths and realistic study timelines.
Understanding Microsoft's Azure Certification Structure
Microsoft groups Azure certifications into three levels, each building on the one before, so candidates learn the fundamentals before moving to specialist or expert credentials.
Fundamentals Level (900-Series)
The 900-level certifications are the entry points to Azure and related Microsoft technologies. They have no prerequisites, and most candidates are ready after 2-4 weeks of study. The fundamentals tier includes:
- AZ-900: Azure Fundamentals
- SC-900: Security, Compliance, and Identity Fundamentals
- DP-900: Data Fundamentals
- AI-901: AI Fundamentals (AI-900 retired 30 June 2026; AI-901 now earns this certification)
- PL-900: Power Platform Fundamentals
- MB-900: Dynamics 365 Fundamentals
AZ-900 is the usual first exam for anyone new to Azure. It covers core Azure services, pricing models, support options and basic architecture. SC-900 covers security concepts that apply across Microsoft cloud services. DP-900 introduces data concepts and Azure data services and needs no programming experience. AI-901 (which replaced AI-900) covers AI fundamentals. A fundamentals certification shows you understand the core concepts; it does not qualify you to run production systems.
Associate Level
Associate certifications are intermediate credentials that show practical skill in a specific Azure area. They usually need 6-12 months of hands-on experience and 3-6 months of study. The associate tier includes:
- AZ-104: Azure Administrator
- AZ-204 (retired 31 July 2026): Azure Developer
- AZ-500 (retired 31 August 2026): Azure Security Engineer
- AZ-700: Azure Network Engineer Associate
- SC-300: Identity and Access Administrator
- SC-200: Security Operations Analyst
- DP-100 (retired 1 June 2026): Data Scientist
- DP-203 (retired 31 March 2025): Data Engineer
- AI-102 (retired 30 June 2026): AI Engineer
Employers look for associate certifications when hiring. Each one targets a job role and shows hands-on skill with Azure services. AZ-104 qualifies you for Azure Administrator positions managing cloud infrastructure. AZ-204 (retired) was for developers building cloud applications on Azure, AZ-500 (retired) covered security engineering, and DP-203 (retired) covered data engineering on Azure data platforms.
Expert Level
Expert certifications are the top tier of Azure credentials. They require advanced knowledge, usually build on more than one associate certification, and expect 2-5 years of experience in the field. The expert tier includes:
- AZ-305: Azure Solutions Architect Expert
- AZ-400: DevOps Engineer Expert
- SC-100: Cybersecurity Architect Expert
AZ-305 is one of the most sought-after Azure certifications and shows you can design complete cloud solutions. SC-100 covers advanced cybersecurity architecture. Both often lead to senior positions and higher pay.
Cloud Administrator Career Path
The Cloud Administrator path suits people who manage Azure infrastructure, identities and resources day to day.
AZ-900 (Fundamentals)
↓
AZ-104 (Administrator)
↓
AZ-305 (Solutions Architect Expert)
↓
AZ-700 (Network Engineer Associate)
Stage 1: AZ-900 Azure Fundamentals
Start with AZ-900. It tests basic knowledge of Azure services, deployment models and core concepts, and covers compute, storage, database and networking services at a conceptual level.
Study Duration: 2-4 weeks
Prerequisites: None
Value: Entry-level validation of Azure knowledge
Stage 2: AZ-104 Azure Administrator
Next comes AZ-104. This associate exam tests whether you can manage Azure subscriptions, storage, virtual machines, virtual networking and identities, using hands-on scenarios in the Azure Portal, PowerShell and Azure CLI.
Study Duration: 3-6 months (with hands-on experience)
Prerequisites: 6-12 months of Azure administration experience recommended
Key Topics:
- Managing Azure identities and governance
- Implementing and managing storage
- Deploying and managing Azure compute resources
- Configuring and managing virtual networking
- Managing and maintaining Azure resources
AZ-104 qualifies you for Azure Administrator roles. The US Bureau of Labor Statistics (May 2025) reports a median annual wage of $99,130 for network and computer systems administrators, the closest occupation it tracks (10% earn under $62,640, 10% earn over $155,050); pay varies with location and experience. Source: BLS, network and computer systems administrators.
Stage 3: AZ-305 Azure Solutions Architect Expert
AZ-305 moves you towards architect positions. Anyone can sit the AZ-305 exam, but Microsoft awards the Solutions Architect Expert certification only to people who also hold Azure Administrator Associate (AZ-104). The exam tests whether you can design complete Azure solutions from business requirements, covering infrastructure, databases, applications and security.
Study Duration: 4-6 months (with 2+ years of Azure administration experience)
Prerequisites: Azure Administrator Associate (AZ-104) is required for the Expert certification
Key Topics:
- Designing infrastructure solutions
- Designing business continuity solutions
- Designing security, governance, and compliance
- Designing data storage solutions
- Designing application architectures
Azure Solutions Architects map to the BLS category of computer network architects, whose median annual wage was $134,050 in May 2025 (10% earn under $79,900, 10% earn over $202,680). Source: BLS, computer network architects.
Stage 4: AZ-700 Azure Network Engineer Associate
AZ-700 adds network design and implementation. This associate certification fills in the specialist networking knowledge that AZ-305 only touches.
Study Duration: 2-3 months (with prior AZ-305 knowledge)
Prerequisites: None formal, but AZ-305 knowledge recommended
Key Topics:
- Implementing hybrid connectivity
- Designing and implementing core networking infrastructure
- Designing and implementing routing
- Securing network connectivity
Total Path Duration: 12-24 months
The full administrator path leads to senior cloud infrastructure roles with six-figure pay.
Developer Career Path
The Developer path suits software engineers who build cloud applications on Azure. It covers application development, deployment automation and DevOps.
AZ-900 (Fundamentals)
↓
AI-200 (Azure AI Cloud Developer Associate)
↓
AZ-104 (Administrator Associate)
↓
AZ-400 (DevOps Engineer Expert)
↓
AZ-305 (Solutions Architect Expert)
Stage 1: AZ-900 Azure Fundamentals
Start with AZ-900 for the core Azure knowledge. Developers should pay most attention to compute, databases, messaging and the Azure development tools.
Study Duration: 2-4 weeks
Prerequisites: None
Developer Focus: Azure App Service, Azure Functions, Azure SQL Database, Azure Cosmos DB
Stage 2: AZ-204 Azure Developer Associate (retired 31 July 2026)
AZ-204 was the exam for developers building Azure solutions. It tested whether you could develop applications on Azure services, authenticate and authorise users, manage databases and build secure solutions.
Study Duration: 4-6 months (with 2+ years of development experience)
Prerequisites: Programming experience in at least one language
Key Topics:
- Implement Azure App Service web apps
- Implement Azure Functions and Logic Apps
- Develop for Azure Storage
- Implement Azure Cosmos DB
- Implement user authentication and authorisation
- Implement secure cloud solutions
This certification qualified holders for Azure Developer positions.
Stage 3: AZ-400 DevOps Engineer Expert
AZ-400 is the DevOps step. This expert exam tests whether you can design and build continuous integration and continuous deployment (CI/CD) pipelines in Azure DevOps.
Study Duration: 4-6 months (with 3+ years of development experience)
Prerequisites: AZ-104 required (or an AZ-204 pass earned before 31 July 2026); AI-200 does not satisfy it
Key Topics:
- Designing a DevOps strategy
- Implementing DevOps development processes
- Implementing CI/CD with Azure Pipelines
- Implementing infrastructure and configuration management
- Maintaining project quality and security
Azure DevOps Engineers map to the BLS category of software developers, whose median annual wage was $135,980 in May 2025 (10% earn under $82,460, 10% earn over $214,670). Source: BLS, software developers.
Stage 4: AZ-305 Azure Solutions Architect Expert
AZ-305 is the last step for developers moving into architecture. With a development background, you design enterprise solutions that combine application services, databases, integration services and DevOps practices.
Study Duration: 3-5 months (with prior development and DevOps experience)
Prerequisites: Azure Administrator Associate (AZ-104) is required for the Expert certification
Advantages: Your DevOps experience accelerates AZ-305 preparation
Total Path Duration: 14-26 months
The developer path leads to principal architect or technical leadership roles. BLS's closest architecture occupation, computer network architects, reports a top 10% figure of $202,680 a year (May 2025).
Security Engineer Career Path
The Security Engineer path suits people working in cloud security, compliance and identity management. It covers security architecture, threat detection and compliance frameworks.
AZ-900 (Fundamentals)
↓
SC-900 (Security Fundamentals)
↓
SC-500 (Cloud and AI Security Engineer Associate)
↓
SC-300 (Identity and Access Administrator)
↓
SC-200 (Security Operations Analyst)
Stage 1: AZ-900 Azure Fundamentals
Start with AZ-900 for the core Azure knowledge. Security professionals should pay most attention to security features, compliance offerings and the Azure security services.
Study Duration: 2-4 weeks
Prerequisites: None
Security Focus: Microsoft Defender for Cloud, compliance offerings, encryption services
Stage 2: SC-900 Security, Compliance, and Identity Fundamentals
SC-900 covers security fundamentals: security concepts, Azure security solutions and Microsoft compliance offerings. It gives you the terminology the later security exams use.
Study Duration: 2-4 weeks
Prerequisites: None
Key Topics:
- Security, compliance, and identity concepts
- Capabilities of Microsoft security solutions
- Capabilities of Microsoft compliance solutions
- Capabilities of Microsoft identity and access solutions
Stage 3: AZ-500 Azure Security Engineer Associate (retired 31 August 2026)
AZ-500 tested whether you could apply security controls to Azure infrastructure. The associate exam covered Azure identities and access, securing data and applications, and security operations.
Study Duration: 4-6 months (with 2+ years of security experience)
Prerequisites: AZ-104 recommended, strong networking and security fundamentals
Key Topics:
- Managing identity and access
- Securing data and applications
- Managing security operations
- Securing infrastructure
Azure Security Engineers map to the BLS category of information security analysts, whose median annual wage was $129,180 in May 2025 (10% earn under $75,090, 10% earn over $199,850). Source: BLS, information security analysts.
Stage 4: SC-300 Identity and Access Administrator
SC-300 specialises in identity and access management. The associate exam tests whether you can manage identity infrastructure, set up access management and maintain governance.
Study Duration: 3-4 months (with SC-900 foundation)
Prerequisites: SC-900 recommended
Key Topics:
- Implementing authentication and authorisation
- Implementing identity governance
- Managing application access
- Implementing identity and access for hybrid and multi-cloud environments
Stage 5: SC-200 Security Operations Analyst
SC-200 is the last stage of the security path and covers security operations: threat detection, response and investigations with Azure security tools.
Study Duration: 3-4 months
Prerequisites: None formal; Microsoft's SC-200 certification page lists no required prior certification, though prior security operations experience is expected
Key Topics:
- Mitigating threats using Microsoft Defender
- Investigating security events using Microsoft Sentinel
- Performing threat hunting
- Responding to data loss prevention alerts
Total Path Duration: 14-24 months
The security path leads to senior security architect roles. BLS does not track cybersecurity architecture as a separate occupation from other information security roles, so no comparable figure is given here.
Data Professional Career Path
The Data Professional path suits people working in data analytics, data engineering and business intelligence.
AZ-900 (Fundamentals)
↓
DP-900 (Data Fundamentals)
↓
AI-300 (Machine Learning Operations Engineer) OR DP-700 (Fabric Data Engineer)
Stage 1: AZ-900 Azure Fundamentals
Start with AZ-900. Data professionals should pay most attention to the data services: Azure SQL Database, Azure Cosmos DB, Azure Data Lake Storage and Azure Synapse Analytics.
Study Duration: 2-4 weeks
Prerequisites: None
Data Focus: Azure storage and database services, data integration services
Stage 2: DP-900 Data Fundamentals
DP-900 covers data fundamentals and needs no programming. It deals with data analysis, data visualisation and Azure data services at a conceptual level.
Study Duration: 2-4 weeks
Prerequisites: None
Key Topics:
- Core data concepts
- Data analytics in Azure
- Data visualisation with Power BI
- Data storage in Azure
Stage 3a: DP-100 Data Scientist (Specialisation Path, retired 1 June 2026)
Data scientists working in machine learning and analytics used to take DP-100 (retired). The associate exam tested whether you could build machine learning models in Azure Machine Learning and deliver data science solutions.
Study Duration: 4-6 months (with Python/R experience and statistics background)
Prerequisites: Strong programming background, statistics knowledge
Key Topics:
- Managing data and compute for machine learning
- Training machine learning models
- Managing model endpoints and deployment
- Responsible AI implementation
Azure Data Scientists map to the BLS category of data scientists, whose median annual wage was $120,230 in May 2025 (10% earn under $67,240, 10% earn over $199,130). Source: BLS, data scientists.
Stage 3b: DP-203 Data Engineer (Specialisation Path, retired 31 March 2025)
Data engineers working on data platforms used to take DP-203 (retired). The associate exam tested whether you could design and build data solutions with Azure data services.
Study Duration: 4-6 months (with ETL/data engineering experience)
Prerequisites: Data warehousing and ETL knowledge
Key Topics:
- Design and implement data storage
- Design and implement data processing
- Design and implement data security and compliance
- Manage and monitor data solutions
Azure Data Engineers map to the BLS category of database architects, whose median annual wage was $139,500 in May 2025 (10% earn under $86,240, 10% earn over $204,000). Source: BLS, database administrators and architects.
Total Path Duration: 9-15 months (choose specialisation based on career goals)
AI and Machine Learning Career Path
The AI/Machine Learning path suits people working in artificial intelligence, machine learning and Azure AI services, building AI models and the applications that use them.
AZ-900 (Fundamentals)
↓
AI-901 (Azure AI Fundamentals)
↓
AI-103 (Azure AI Apps and Agents Developer)
Stage 1: AZ-900 Azure Fundamentals
Start with AZ-900 for Azure infrastructure and services. AI professionals should pay most attention to compute, storage and the Azure AI services.
Study Duration: 2-4 weeks
Prerequisites: None
AI Focus: Azure compute services, container services, AI services
Stage 2: AI-900 AI Fundamentals (retired 30 June 2026)
AI-900 covered the basics of artificial intelligence and machine learning. The fundamentals exam needed no programming experience and covered AI concepts, machine learning and Azure AI services.
Study Duration: 2-4 weeks
Prerequisites: None
Key Topics:
- Machine learning fundamentals
- Computer vision concepts
- Natural language processing
- Conversational AI
- Azure AI services
Stage 3: AI-102 AI Engineer Associate (retired 30 June 2026)
AI-102 tested whether you could build AI applications with Azure AI services. The associate exam covered cognitive search, knowledge mining and conversational agents rather than training machine learning models, which sits with the data scientist path instead.
Study Duration: 4-6 months (with Python experience and machine learning background)
Prerequisites: Strong programming background, Python experience preferred
Key Topics:
- Planning and managing Azure AI services (formerly Cognitive Services) solutions
- Implementing computer vision solutions
- Implementing natural language processing solutions
- Implementing knowledge mining solutions
- Implementing conversational AI solutions
Azure AI Engineers map to the BLS category of software developers, whose median annual wage was $135,980 in May 2025 (10% earn under $82,460, 10% earn over $214,670). Source: BLS, software developers.
Total Path Duration: 9-15 months
Realistic Timeline Expectations
Knowing how long each stage really takes helps you plan and keeps you from losing heart when progress is slow. Study time depends a great deal on your experience and how quickly you learn.
Fundamentals Level Certifications
Fundamentals certifications usually take 2-4 weeks of focused study. They test concepts, not hands-on skills, and most people who prepare properly pass first time.
Associate Level Certifications
Associate certifications take 3-6 months of study plus hands-on experience. They test implementation detail as well as concepts. Most associate exams assume 6-12 months of relevant work experience before you start studying.
Related experience shortens the timeline a lot. An experienced system administrator might complete AZ-104 in 2-3 months, while someone new to cloud computing should expect 4-6 months of intensive study and hands-on practice.
Expert Level Certifications
Expert certifications are the top level and usually take 6-12 months of preparation after the relevant associate certifications. They test advanced scenarios and problem-solving that come only from substantial real-world experience.
Study Methods That Work
Use several kinds of resource together: official Microsoft documentation, hands-on labs, practice exams and community forums. Set up a separate Azure subscription for experiments, and build real projects so the theory sticks.
Key success factors include:
- Consistent daily study schedule
- Hands-on practice in Azure portal
- Taking multiple practice exams
- Joining Azure community forums
- Building portfolio projects
Each path, whether infrastructure, development, data or AI, leads to well-paid roles with good job security. The order is the same for all of them: fundamentals first, then hands-on experience, then associate and expert certifications. Azure changes quickly, so keep learning and applying what you know after you are certified.
AZ-900 practice is free in full with a free account at azureprep.com.