Azure

Azure DevOps Engineer Career Roadmap: AZ-104 → AZ-400 → SC-100 Path to Senior DevOps

2026-05-24
NicheeLab Editorial Team

Azure DevOps Engineer is the role responsible for designing and implementing CI/CD, IaC, GitOps, and SRE practices using Azure DevOps Services and GitHub. It is one of the most in-demand positions among Japanese DevOps, SRE, and platform engineering job openings. Salaries land in the JPY 9-14M range for senior DevOps and JPY 15-20M for principal/platform engineering roles. This article walks through the standard path from zero to Azure DevOps Engineer (AZ-900 → AZ-104 → AZ-400 → specialization), combining certification milestones, hands-on experience, and adjacent domains such as Kubernetes and multi-cloud.

The Standard Path: AZ-900 → AZ-104 → AZ-400

The standard path to Azure DevOps Engineer breaks down into the following three stages.

StageCertificationDurationCumulative HoursPosition Reached
1AZ-900 (Fundamentals)1 month25-40 hoursAzure concept fluency
2AZ-104 (Administrator)3-4 months+100-150 hoursOperations and implementation basics
3AZ-400 (DevOps Engineer Expert)3-4 months+100-150 hoursDevOps Engineer Expert
Total7-9 months / 225-340 hoursEntry to senior DevOps

Either AZ-104 or AZ-204 (Developer) is a prerequisite for the AZ-400 Expert credential. Since AZ-204 retires on July 31, 2026, the AZ-104 → AZ-400 route is the safer choice for new candidates. Realistic timelines: 7-9 months with 1-3 years of IT experience, 5-7 months with prior development experience, and 10-12 months for complete beginners.

AZ-104 Route vs AZ-204 Route

The AZ-400 prerequisite can be satisfied by either AZ-104 or AZ-204.

AspectAZ-104 Route (Platform-leaning)AZ-204 Route (Developer-leaning)
OrientationInfra operations / IaC / cloud governanceApp development / containers / microservices
Target RolePlatform Engineer / SREApplication DevOps Engineer
Recommendation in 2026Recommended (accounts for AZ-204 retirement)Only as a last-minute push before retirement

Integrating Kubernetes

AZ-400 touches on AKS (Azure Kubernetes Service) but does not go deep. Kubernetes is effectively a required skill in real-world DevOps and platform engineering roles, so pairing AZ-400 with a Kubernetes certification is strongly recommended.

  • CKA (Kubernetes Administrator): For Kubernetes cluster administrators. AZ-400 + CKA covers running AKS on Azure end-to-end.
  • CKAD (Kubernetes Application Developer): For developers building apps on Kubernetes. AZ-400 + CKAD covers microservice CI/CD comprehensively.
  • CKS (Kubernetes Security Specialist): Kubernetes security specialist. CKA is a prerequisite; AZ-400 + CKS reinforces your DevSecOps profile.

The AZ-400 + CKA + CKS trifecta is a strong differentiator for senior DevOps/SRE roles in the JPY 12-18M salary range.

IaC Strategy: Bicep + Terraform Dual Stack

AZ-400 covers three IaC tools — Bicep, ARM, and Terraform — with weighting in the order Bicep > ARM > Terraform. The realistic balance for real-world skills is below.

  • Bicep as your primary tool: Officially recommended by Microsoft. Almost all new Azure projects use Bicep.
  • Terraform as your secondary tool: Multi-cloud coverage and maintaining existing Terraform codebases.
  • Keep ARM minimal: Legacy maintenance only. Understanding how Bicep transpiles to ARM is enough.

Specialization: Three Directions

After AZ-400, specialization is what carries you into a strong senior DevOps position.

  • DevSecOps: Push into the upper layers of DevSecOps with SC-300 + SC-100. Covers Defender for DevOps, GitHub Advanced Security, and Zero Trust design.
  • Architect integration: Add AZ-305 (Solutions Architect Expert) for an AZ-400 + AZ-305 dual-Expert profile combining design and automation.
  • Kubernetes / Platform: The CKA + CKAD + CKS trifecta, Argo CD / FluxCD GitOps, and platform abstraction stacks like Crossplane.

Multi-cloud DevOps

Many Japanese enterprises run a mix of Azure, AWS, and GCP, and the market value of multi-cloud DevOps engineers is rising rapidly.

  • AWS Certified DevOps Engineer - Professional: The AWS DevOps Expert credential. Earn it alongside AZ-400 for a Microsoft + AWS dual stack.
  • Google Cloud Professional Cloud DevOps Engineer: GCP's DevOps specialist certification. Heavily weighted toward SRE practices.
  • HashiCorp Certified: Terraform Associate: Official Terraform certification. Proof of multi-cloud IaC capability.

AZ-400 + AWS DevOps Pro + Terraform Associate is a combination frequently listed in senior platform engineer and SRE openings at global companies.

Standard Career Path

  1. Developer / Infra Engineer (3-5 years): Build hands-on fluency with Git, scripting, and CI/CD basics. Earn AZ-900 and AZ-104.
  2. Junior DevOps (1-3 years): Maintain and improve existing pipelines, support IaC adoption. The stage where AZ-400 becomes the target.
  3. Mid-level DevOps (2-3 years): Design CI/CD for new projects, lead Kubernetes adoption. Add AZ-400 + CKA/CKAD.
  4. Senior DevOps / SRE (3-5 years): Drive company-wide DevOps strategy and lead platform teams. Add AZ-400 + SC-100 + multi-cloud certifications.
  5. Principal DevOps / Platform Engineer (5+ years): Own organization-wide Platform Engineering strategy and build the Internal Developer Platform.

Recommended Study Resources

Frequently Asked Questions

What is the standard path to becoming an Azure DevOps Engineer?

The standard path is AZ-900 → AZ-104 → AZ-400. AZ-104 (Administrator) gives you broad Azure operational knowledge, and AZ-400 (DevOps Engineer Expert) integrates CI/CD, IaC, and SRE practices on top of that. There is also an AZ-204 (Developer) route (AZ-900 → AZ-204 → AZ-400), but since AZ-204 retires in July 2026, the AZ-104 route is the safer choice for new candidates. Reaching the Expert credential via AZ-104 → AZ-400 typically takes 7-9 months of study, after which SC-300 (DevSecOps focus) or AZ-305 (architecture integration) are the standard next steps.

Can I pass AZ-400 if I only know GitHub?

No. AZ-400 covers Azure DevOps Services and GitHub in roughly equal measure. You also need to learn Azure Pipelines YAML syntax, Azure Boards/Repos workflows, and Azure Artifacts. Candidates coming from a GitHub Actions-only background typically need 30-50 hours to catch up on Azure DevOps Services UI and terminology (Project, Repository, Build, Release, Variable Group). In practice, many Japanese enterprises run a mix of Azure DevOps Services and GitHub, so engineers fluent in both command a higher market value.

Should I pursue Kubernetes certifications (CKA / CKAD / CKS)?

Strongly recommended. AZ-400 touches on AKS (Azure Kubernetes Service) but does not go deep. In real DevOps and platform engineering roles Kubernetes is effectively a required skill, and pairing AZ-400 with CKA (Kubernetes Administrator) or CKAD (Kubernetes Application Developer) is highly valued in the job market. The AZ-400 + CKA + CKS (Kubernetes Security) trifecta is a strong differentiator for senior DevOps/SRE roles in the JPY 12-18M salary band. Microsoft also keeps shipping Kubernetes-based services (Azure Container Apps, Azure Operator Nexus), so the long-term value of Kubernetes skills only keeps rising.

Which IaC tool should I learn — Bicep, Terraform, or ARM?

Bicep as your primary tool and Terraform as your secondary is the realistic balance. Bicep is the Azure-specific DSL Microsoft positions as the ARM successor, and it is the de facto choice for new IaC on Azure projects. Terraform is HashiCorp's multi-cloud tool, and organizations also running AWS/GCP often already have it entrenched. ARM templates use the older JSON format and are low priority unless you are maintaining legacy code. On AZ-400, the weighting goes Bicep > ARM > Terraform, so prioritize Bicep for exam prep. For real-world value, learn Terraform in parallel to position yourself as a multi-cloud DevOps engineer.

What is the salary range for DevOps engineers?

In Japan, salaries vary widely by role and experience. Junior DevOps (1-3 years): JPY 5-8M. Mid-level DevOps (3-6 years): JPY 7-11M. Senior DevOps/SRE (6-10 years): JPY 9-14M. Principal DevOps / Platform Engineer (10+ years): JPY 12-20M. A Kubernetes-integrated stack like AZ-400 + AZ-104 + CKA + CKS, or a multi-cloud stack like AZ-400 + AWS Certified DevOps Engineer Professional + GCP Professional Cloud DevOps Engineer, makes the upper end of these ranges much more reachable. Senior DevOps roles at global or foreign-capital firms can stretch to JPY 15-25M. As a freelancer, JPY 120K-200K per day is a realistic rate.

Related Articles and Career Resources

Azure Architect キャリアロードマップ|AZ-900 → AZ-305 → SC-100 シニアアーキテクトへの道【2026 年版】

Azure Solutions Architect になるための認定取得ロードマップ完全版。AZ-900 → AZ-104 → AZ-305 の王道ルート、AZ-400 / SC-100 / AZ-700 との二刀流 / 三刀流戦略、マルチクラウド対応 (AWS / GCP)、未経験から 7-12 ヶ月の学習プラン、年収レンジまで日本語で網羅。

Azure セキュリティエンジニア キャリアロードマップ|SC-900 → SC-200/300/400 → SC-100 シニアへの道【2026 年版】

Azure セキュリティエンジニアになるための認定取得ロードマップ完全版。SC-900 → SC-200/300/400 のいずれか → SC-100 / SC-500 の王道ルート、ロール別の優先順序、CISSP との二刀流戦略、SC-500 (旧 AZ-500 後継、2026-09 GA 予定) の動向、10-15 ヶ月の学習プラン、年収レンジまで日本語で網羅。

AZ-400 完全ガイド|Microsoft Azure DevOps Engineer Expert 出題範囲・学習リソース・合格戦略【2026 年版】

Microsoft Certified: DevOps Engineer Expert (AZ-400) の完全ガイド。5 ドメインの出題範囲、Azure DevOps と GitHub の両方を網羅、IaC (Bicep / ARM / Terraform)、CI/CD パイプライン設計、DevSecOps、SRE プラクティス、3-4 ヶ月の合格ロードマップ、AZ-305 / SC-100 との二刀流戦略を日本語で網羅。

Azure ネットワークエンジニア キャリアロードマップ|AZ-104 → AZ-700 → シニアネットワークアーキテクトへの道【2026 年版】

Azure ネットワークエンジニアになるための認定取得ロードマップ完全版。AZ-900 → AZ-104 → AZ-700 の王道ルート、Hub-Spoke / Virtual WAN / ExpressRoute / Azure Firewall / Front Door の実装、Cisco CCNP / AWS Advanced Networking との二刀流、9-12 ヶ月の学習プラン、年収レンジまで日本語で網羅。

Certification details in this article are based on the official Microsoft Learn credentials page and the official Study Guides for each certification. This article is not an official Microsoft Corporation product and is not affiliated with or endorsed by Microsoft. Microsoft, Azure, Azure DevOps, and GitHub are trademarks of the Microsoft group of companies. Information is based on materials published as of May 24, 2026. Always check the official pages for the latest details.

Check what you learned with practice questions

Practice with certification-focused question sets

View Azure exam prep page
Author

NicheeLab Editorial Team

NicheeLab editorial team focused on data engineering and cloud certification learning. Content is structured around practical study needs and official exam domains.


Related articles
Azure

AZ-900 Azure Fundamentals: Complete Exam Guide (2026)

Pass AZ-900 — cloud concepts, Azure architecture, management...

Azure

Azure Certification Roadmap: Which Cert to Take Next (2026)

Choose your Azure certification path — Fundamentals, Associa...

Azure

AI-901 Azure AI Fundamentals (Beta): Complete Guide (2026)

Pass AI-901 — Microsoft Foundry, generative AI, responsible ...

Azure

Microsoft Entra ID Fundamentals for Azure Certs (2026)

Entra ID basics every cert candidate needs — tenants, identi...

Azure

DP-900 Azure Data Fundamentals: Complete Guide (2026)

Pass DP-900 — relational, non-relational, analytics, Power B...

Browse all Azure articles (104)
© 2026 NicheeLab All rights reserved.