Career Roadmap
Azure Solutions Architect: Zero to Hero
This roadmap guides you from Azure operations to professional solutions architecture on Microsoft Azure. You will design identity, infrastructure, data, and business continuity solutions at an enterprise level. AZ-104 builds the operational foundation. AZ-305 builds the design judgment on top of it. Both are required for the Microsoft Certified Azure Solutions Architect Expert badge. The roadmap reflects the April 17, 2026 updates to both exams. Use ExamOS practice quizzes to track progress at every stage.
Who is this roadmap for?
This roadmap is designed for Azure Administrators and Cloud Engineers transitioning into architecture roles who already have operational Azure experience, as well as Solutions Architects working on other platforms who want to add Azure depth. Additionally, it is tailored for DevOps Engineers designing infrastructure pipelines, as well as Technical Project Managers overseeing cloud migrations who require architectural credential validation.
Skills You'll Develop
Deploy and manage Azure resources with AZ-104-level depth across networking, compute, and storage.
Design Entra ID architectures, RBAC, PIM, Conditional Access, and Azure Policy initiatives.
Design data storage solutions including Cosmos DB, Azure SQL, and Azure Storage with appropriate consistency and tiering.
Select appropriate compute services and design hub-spoke or Virtual WAN network topologies.
Design high availability, disaster recovery, and migration strategies aligned to RTO/RPO requirements.
Apply the Well-Architected Framework to evaluate trade-offs and make defensible design decisions.
Target Roles in this Roadmap
- Azure Solutions Architect: Designs enterprise-grade Azure solutions across identity, infrastructure, data, and business continuity
- Cloud Solutions Architect: Designs cloud-native architectures on Azure and hybrid environments
- Infrastructure Architect: Designs Azure infrastructure and migration strategies
- DevOps Architect: Designs CI/CD pipelines and infrastructure as code with Azure DevOps
- Security Architect (Azure Focus): Designs secure Azure architectures with SC-100 specialization
Typical Employer Categories
- Technology & Software Firms: SaaS platforms, enterprise software vendors, Microsoft partners
- Financial Services: Banking, fintech, insurance, and payment processors on Azure
- Healthcare Organizations: Patient data platforms, HIPAA-compliant Azure workloads
- Consulting & Professional Services: Azure architecture assessments, transformation engagements, cloud advisory
- Government & Public Sector: Federal agencies, state government, public sector Azure migrations
- Microsoft Partners: Azure Managed Service Providers (MSPs), Azure Expert MSPs, and system integrators
The Certification Path
Recommended Path
| Cert | When | Why |
|---|---|---|
| Microsoft AZ-104 (Azure Administrator) | Month 2-5 | Azure operational foundation. Required for the Expert badge and ensures you understand what you are designing. |
| Microsoft AZ-305 (Solutions Architect Expert) | Month 6-10 | The core architecture credential. This is what the roadmap is built around. |
Optional Foundation
| Cert | When | Why |
|---|---|---|
| Microsoft AZ-900 (Azure Fundamentals) | Month 1 | Optional warm-up. Only needed if you are completely new to Azure and cloud concepts. |
Specialization Path
| Cert | When | Why |
|---|---|---|
| Microsoft AZ-400 (DevOps Engineer Expert) | Month 12-16 | DevOps depth for architects who own delivery pipelines and infrastructure as code. |
| Microsoft SC-100 (Cybersecurity Architect Expert) | Month 12-16 | Security architecture depth for architects moving into security-focused roles. |
| Microsoft AI-103 (Azure AI Engineer) | Month 12-16 | AI applications and agents on Azure Foundry for architects building AI solutions. |
Milestones: Junior → Mid → Senior
| Level | Milestone | When |
|---|---|---|
| Entry Level | AZ-104 + basic Azure administration skills | Month 5-6 |
| Practitioner Level | AZ-305 + Azure architecture proficiency | Month 10-12 |
| Specialist Level | AZ-305 + follow-on specialization + enterprise architecture skills | Month 16+ |
Step 0 - Cloud and IT foundations
Build the technical and conceptual foundation that every Azure architecture decision depends on. These fundamentals surface constantly in both AZ-104 and AZ-305 scenario questions.
~1 month~1 month
Step 0 - Cloud and IT foundations
Build the technical and conceptual foundation that every Azure architecture decision depends on. These fundamentals surface constantly in both AZ-104 and AZ-305 scenario questions.
- Networking fundamentals: TCP/IP, subnets, CIDR, DNS, routing, load balancing, and how failures manifest
- Compute concepts: VMs, containers, serverless, scaling patterns, and when to use each
- Storage types: block, file, object storage and their appropriate use cases
- Database fundamentals: relational vs non-relational, ACID vs BASE, consistency models, and replication
- Security principles: CIA triad, authentication vs authorization, least privilege, and defense in depth
- Business continuity concepts: RTO, RPO, high availability, disaster recovery patterns
- Architecture patterns: monolithic vs microservices, synchronous vs asynchronous communication, event-driven architecture
Certifications
💡 AZ-305 scenario questions frequently embed RTO and RPO values as constraints that determine the correct architecture. Understand what these numbers mean before studying specific services.
💡 AZ-900 (Azure Fundamentals) is optional. If you are completely new to Azure, take it as a warm-up (2-3 weeks). If you already have any cloud or IT experience, skip it and go directly to AZ-104.
🏁 Entry Level Checkpoint: You understand networking, compute, storage, and database fundamentals. You can explain RTO and RPO in business terms.
🛠 Project Ideas
- ▸Design a simple three-tier application architecture. Identify the RTO and RPO requirements you would set for each tier.
- ▸Compare Azure SQL Database with Cosmos DB for a retail application. Document the trade-offs for consistency, scalability, and cost.
Step 1 - Azure administration (AZ-104)
Build the Azure administration knowledge required to earn AZ-104 and the operational foundation AZ-305 assumes. This is the most critical step in the roadmap—candidates who rush AZ-104 consistently struggle with AZ-305.
~3-4 months~3-4 months
Step 1 - Azure administration (AZ-104)
Build the Azure administration knowledge required to earn AZ-104 and the operational foundation AZ-305 assumes. This is the most critical step in the roadmap—candidates who rush AZ-104 consistently struggle with AZ-305.
- Identity and Governance (20-25%): Microsoft Entra ID, Azure RBAC, Entra ID roles vs RBAC roles, Azure Policy, Management Groups, subscription governance
- Virtual Networking (15-20%): VNets, subnets, NSGs, VNet peering, UDRs, Azure Firewall, Azure Bastion, Private Endpoints vs Service Endpoints, VPN Gateway, ExpressRoute
- Compute (20-25%): VMs, availability options, VM Scale Sets, ARM templates, Bicep, AKS basics, App Service
- Storage (15-20%): Storage Accounts, redundancy options, Blob storage lifecycle, Azure Files, Managed Disks
- Monitoring (5-10%): Azure Monitor, diagnostic settings, Log Analytics, KQL basics, Application Insights
- Backup and Disaster Recovery (10-15%): Azure Backup, Recovery Services vault, Azure Site Recovery, backup policies
Certifications
💡 AZ-104 is required to earn the Azure Solutions Architect Expert badge. You can sit AZ-305 without it, but the Expert certification only activates when you hold both.
💡 Identity and Governance (20-25%) and Virtual Networking (15-20%) together cover up to 45% of AZ-104. Both are also the most heavily tested domains on AZ-305. Invest disproportionately here.
💡 VNet peering non-transitivity is the concept that causes the most networking scenario mistakes on both exams. Internalize it completely.
🏁 Entry Level Checkpoint: You have passed AZ-104. You can reason through Azure networking, RBAC, and compute scenarios confidently.
🛠 Project Ideas
- ▸Deploy a VNet with subnets, NSGs, and VNet peering. Deploy a VM and verify connectivity. Troubleshoot a networking misconfiguration.
- ▸Create an Azure Policy that enforces tagging and denies creation of unencrypted storage accounts. Test it by attempting to create a non-compliant resource.
- ▸Configure a Recovery Services vault, create a backup policy, and perform a backup and restore of a VM.
Step 2 - Architecture thinking and design fundamentals
Make the transition from operational thinking to design thinking before beginning AZ-305 preparation. This mindset shift is the single most important preparation step for the Expert exam.
~1-2 months~1-2 months
Step 2 - Architecture thinking and design fundamentals
Make the transition from operational thinking to design thinking before beginning AZ-305 preparation. This mindset shift is the single most important preparation step for the Expert exam.
- Azure Well-Architected Framework: Reliability, Security, Cost Optimization, Operational Excellence, Performance Efficiency
- Microsoft Cloud Adoption Framework (CAF): strategy, plan, ready, adopt, govern, manage
- Azure Landing Zones: conceptual architecture, platform vs application landing zones, enterprise-scale reference implementation
- Design trade-offs: how reliability, performance, cost, and security requirements conflict and how architects prioritize them
- Architecture decision records: how to document design choices and their rationale
- Case study technique: reading requirements before background, identifying constraints, answering only from stated requirements
Certifications
💡 AZ-305 uses the language of architecture throughout. Questions describe a business scenario with constraints, then ask you to recommend or design an appropriate solution. This is fundamentally different from AZ-104 operational questions.
💡 The Well-Architected Framework is the lens through which AZ-305 design questions should be evaluated. Every design recommendation should be defensible against one or more pillars.
💡 Case study questions are a significant component of AZ-305. Practice reading extended scenarios and identifying all constraints before evaluating options.
🏁 Practitioner Level Checkpoint 1: You can identify the binding constraint in a scenario and apply the Well-Architected Framework to evaluate design options.
🛠 Project Ideas
- ▸Take a real application you have deployed. Evaluate it against the five Well-Architected Framework pillars. Identify one improvement for each pillar.
- ▸Write an architecture decision record for a specific design choice (e.g., selecting Azure SQL Database over Cosmos DB). Include context, decision, and rationale.
Step 3 - Azure solutions architecture design (AZ-305)
Design Azure solutions across identity, infrastructure, data, and business continuity. AZ-305 covers four domains — Design Identity, Governance, and Monitoring Solutions (25-30%), Design Data Storage Solutions (25-30%), Design Business Continuity Solutions (10-15%), and Design Infrastructure Solutions (25-30%).
~3-4 months~3-4 months
Step 3 - Azure solutions architecture design (AZ-305)
Design Azure solutions across identity, infrastructure, data, and business continuity. AZ-305 covers four domains — Design Identity, Governance, and Monitoring Solutions (25-30%), Design Data Storage Solutions (25-30%), Design Business Continuity Solutions (10-15%), and Design Infrastructure Solutions (25-30%).
- Design Identity, Governance, and Monitoring (25-30%): Entra ID architecture, PIM design, Conditional Access, Entra ID Governance, management group hierarchy, policy initiative design, Log Analytics workspace design, Sentinel deployment architecture
- Design Data Storage Solutions (25-30%): Storage account design, Cosmos DB consistency levels, Azure SQL Database tier selection, data architecture patterns (OLTP vs OLAP), data migration design, Purview data catalog
- Design Business Continuity Solutions (10-15%): RTO/RPO mapping to Azure patterns, high availability patterns, disaster recovery patterns (backup/restore, pilot light, warm standby, active-active), Azure Site Recovery, Azure Backup, database resilience
- Design Infrastructure Solutions (25-30%): Compute service selection (VMs, App Service, Container Apps, AKS, Functions), container architecture, serverless design, hub-and-spoke vs Virtual WAN, hybrid network design, Front Door vs Application Gateway vs Traffic Manager, migration design (lift-and-shift vs re-platform vs re-architect), Landing Zone design
Certifications
💡 Cosmos DB consistency level selection is one of the most consistently tested AZ-305 topics. Session consistency is the most frequently correct answer for single-user scenarios. Strong consistency is the answer when linearizable reads are explicitly required.
💡 Compute service selection produces the most AZ-305 mistakes. The key signal in each scenario is the workload characteristic that determines the correct service—event-driven short workloads point to Functions, containerized microservices needing orchestration point to AKS, simple containerized apps point to Container Apps.
💡 Design Identity, Governance, and Monitoring (25-30%), Design Data Storage Solutions (25-30%), and Design Infrastructure Solutions (25-30%) are the three largest domains. Together they account for approximately 75-90% of the exam.
🏁 Practitioner Level Checkpoint 2: You have passed AZ-305. You can design enterprise-grade Azure solutions across identity, infrastructure, data, and business continuity.
🛠 Project Ideas
- ▸Design a complete Azure architecture for a fictional e-commerce platform. Include identity, networking, compute, storage, database, backup, and disaster recovery. Document your design decisions.
- ▸Create a migration plan for moving an on-premises application to Azure. Include assessment, target architecture, migration strategy, and cutover plan.
- ▸Design a multi-region disaster recovery architecture for a critical application. Define RTO/RPO, select appropriate services, and document the failover and failback procedures.
Step 4 - Exam consolidation and follow-on paths
Consolidate AZ-305 preparation through integrated scenario practice, case study technique, and targeted gap closure before booking the exam. Identify follow-on credentials that extend your Azure architecture capability.
~1 month~1 month
Step 4 - Exam consolidation and follow-on paths
Consolidate AZ-305 preparation through integrated scenario practice, case study technique, and targeted gap closure before booking the exam. Identify follow-on credentials that extend your Azure architecture capability.
- Case study question technique: read requirements before background, identify constraints, answer only from stated requirements
- Domain-weighted practice: allocate remaining time proportionally to domain weights (Identity 25-30%, Data 25-30%, Infrastructure 25-30%, BCDR 10-15%)
- Cross-domain scenario practice: combining identity, storage, networking, and compute in a single architecture
- Architecture justification: explaining why one architecture is better than another using the Well-Architected Framework
- Follow-on paths: AZ-400 (DevOps Engineer Expert) for pipeline depth, SC-100 (Cybersecurity Architect Expert) for security depth, AI-103 (Azure AI Engineer) for AI applications
Certifications
💡 Consistent performance above 80% on Legend mode across five consecutive ExamOS sessions is the clearest readiness signal for AZ-305.
💡 The most common AZ-305 failure pattern is knowing what services exist without being able to reason through which is correct for a described scenario with multiple plausible alternatives.
💡 AZ-400 (DevOps Engineer Expert) is the most natural immediate follow-on for architects who also own DevOps practices.
💡 SC-100 (Cybersecurity Architect Expert) is the natural follow-on for architects moving into security roles.
💡 AI-103 is a new 2026 credential for architects building AI applications and agents on Azure Foundry.
🏁 Specialist Level Checkpoint: You have passed AZ-305. You can design enterprise-grade Azure solutions at an architectural level.
Final Step - What this path actually builds
This roadmap moves you from Azure operations to professional solutions architecture. AZ-104 validates that you understand Azure infrastructure at an operational level. AZ-305 validates that you can design enterprise-grade solutions across identity, data, infrastructure, and business continuity. The combination signals genuine depth—operational knowledge plus design judgment—which is why the Azure Solutions Architect Expert is one of the most respected cloud certifications in the market. The April 2026 exam updates keep both credentials current. Before booking AZ-305, ensure your AZ-104 foundation is solid. Candidates who rush AZ-104 consistently encounter scenario questions that require operational depth they have not built. The certification opens doors. The architecture judgment you build preparing for it is what keeps them open. Build real architectures. Measure your readiness with ExamOS. Book when your reasoning is sharp and your design decisions are defensible.
Final Step - What this path actually builds
This roadmap moves you from Azure operations to professional solutions architecture. AZ-104 validates that you understand Azure infrastructure at an operational level. AZ-305 validates that you can design enterprise-grade solutions across identity, data, infrastructure, and business continuity. The combination signals genuine depth—operational knowledge plus design judgment—which is why the Azure Solutions Architect Expert is one of the most respected cloud certifications in the market. The April 2026 exam updates keep both credentials current. Before booking AZ-305, ensure your AZ-104 foundation is solid. Candidates who rush AZ-104 consistently encounter scenario questions that require operational depth they have not built. The certification opens doors. The architecture judgment you build preparing for it is what keeps them open. Build real architectures. Measure your readiness with ExamOS. Book when your reasoning is sharp and your design decisions are defensible.
Certifications
Final Thoughts
💡 Total: 8-14 months at 2 hours/day (6-10 months at 3-4 hours/day)
💡 AZ-900: Adds 2-3 weeks for complete beginners (optional).
💡 AZ-104: Typically takes 8-12 weeks for candidates with general IT experience.
💡 Architecture thinking transition: 4-6 weeks to shift from operational to design mindset.
💡 AZ-305: Typically takes 10-16 weeks of preparation after AZ-104 is solid.
💡 **Design Identity, Governance, and Monitoring (25-30%), Data Storage (25-30%), and Infrastructure (25-30%) are the largest domains—allocate proportionally more time.
💡 Readiness: Consistent 80%+ on Legend mode across five sessions is your signal to book.
Honest Timeline
| Path | Minimum Study Pace | More Realistic Pace |
|---|---|---|
| AZ-900 only (optional) | ~2 weeks | ~1 month |
| AZ-104 only | ~2 months | ~3 months |
| AZ-104 + AZ-305 | ~6 months | ~10 months |
| AZ-104 + AZ-305 + AZ-400/SC-100 | ~8 months | ~14 months |