Security Architect — career path
StationX Advanced
The designer of the whole defence, usually after several years as an engineer: threat models, zero trust, identity, SecurityX for hands-on architecture, then CISSP and a cloud architect certification.
1 course · 8 sections · 28 lectures
Free to start: the free lessons and guides for this roadmap →
Try a free cloud security lab: Left open (~4 min) → A scripted simulation in your browser. No account needed.
The path
Start here →
Step 1 — Security foundation
The vocabulary and controls every architecture is built from.
follows the whole CompTIA Security+ (SY0-701) roadmap: 11 courses · 76 sections · 867 lectures · 148 labs · ≈ 172 h of hands-on labs
Learn
- PathFollow the CompTIA Security+ (SY0-701) path — the baseline; architects are expected to have it long behind them
11 courses · 76 sections · 867 lectures · 148 labs · ≈ 172 h of hands-on labs
9 steps — The industry-standard entry certification for a cyber security role.
Step 2 — Think like an architect
Model the threats before you draw the design. SABSA and TOGAF, the frameworks architect adverts name, are studied on the job; no course for them is sold here.
1 course · 8 sections · 28 lectures
Learn
- CourseModeling Threats: Strategies in Threat Modeling (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 28 lectures
- Course Overview 2
- Introduction 2
- Threat Modeling Methods and Types 7
- Advanced Threat Modeling 5
- Dealing with the Findings 4
- Conclusion 1
- Hands-on Activities 6
- Audio Version of Training 1
Step 3 — Identity is the perimeter
Design access the way modern estates enforce it.
follows the whole Microsoft Identity and Access Administrator (SC-300) roadmap: 1 course · 8 sections · 260 lectures · 25 labs · ≈ 16 h of hands-on labs
Learn
- PathFollow the Microsoft Identity and Access Administrator (SC-300) path — identity and access in Entra ID — and one of the certifications Microsoft accepts as the SC-100 prerequisite
1 course · 8 sections · 260 lectures · 25 labs · ≈ 16 h of hands-on labs
3 steps — Identity is the new perimeter. SC-300 covers Entra ID, access management, governance and identity protection in depth.
Open the full Microsoft Identity and Access Administrator (SC-300) roadmap →
Step 4 — Architecture at scale
Practise designing, engineering and governing security across an enterprise.
follows the whole Advanced Security Practice — SecurityX (CAS-005) practice labs roadmap: 113 labs · ≈ 119 h of hands-on labs
Learn
- PathFollow the Advanced Security Practice — SecurityX (CAS-005) practice labs path — Hands-on SecurityX practice labs — there is no SecurityX course here yet
113 labs · ≈ 119 h of hands-on labs
4 steps — SecurityX (CAS-005) practice labs — built for CASP+, renamed SecurityX by CompTIA.
Open the full Advanced Security Practice — SecurityX (CAS-005) practice labs roadmap →
Step 5 — The senior certification
The credential every architect advert lists.
follows the whole CISSP — Certified Information Systems Security Professional roadmap: 16 courses · 66 sections · 737 lectures · 71 labs · ≈ 70 h of hands-on labs
Learn
- PathFollow the CISSP — Certified Information Systems Security Professional path — eight domains, the architect's map of the whole field — needs 5 years' experience to certify, 4 with a qualifying degree or credential (you can pass the exam first)
16 courses · 66 sections · 737 lectures · 71 labs · ≈ 70 h of hands-on labs
5 steps — The senior security certification, spanning eight domains. Requires five years of experience to certify fully.
Open the full CISSP — Certified Information Systems Security Professional roadmap →
Step 6 — Cloud architecture
Design securely for the platform the business is moving to.
follows the whole Microsoft Cybersecurity Architect (SC-100) roadmap: 2 courses · 20 sections · 188 lectures · 59 labs · ≈ 40 h of hands-on labs
Learn
- PathFollow the Microsoft Cybersecurity Architect (SC-100) path — the cyber security architect certification, cloud-first
2 courses · 20 sections · 188 lectures · 59 labs · ≈ 40 h of hands-on labs
3 steps — Microsoft's expert-level security certification. Design a Zero Trust strategy and security architecture across an estate.
Open the full Microsoft Cybersecurity Architect (SC-100) roadmap →
Where this leads
Choose your next roadmap
Advanced · after the job
The AI-Driven Security Architect
Senior roles are going to the people who can direct AI to build security solutions. When you're working in the role and ready for that step, the AI Master's Program is where it's taught — an advanced, application-only programme.
See the AI Master's Program →Application-only. A separate programme for when you're ready.