Microsoft Certified: DevOps Engineer Expert (AZ-400)

Published band 10-15%. Designing and implementing traceability and flow of work (Azure Boards, work items, dashboards), collaboration and communication (wikis, notifications, integrations like Teams/Slack), and continuous improvement metrics (DORA metrics, cycle time, lead time).

• Design and implement traceability and flow of work (Azure Boards, work items, GitHub Issues/Projects, dashboards)
• Design and implement collaboration, communication, and continuous-improvement metrics (wikis, notifications, DORA metrics, cycle/lead time)

Published band 10-15%. Designing and implementing branching strategies (trunk-based, GitFlow, feature branches), pull requests and code reviews, repository structure and scaling (monorepo vs multi-repo, Git LFS, submodules), and securing repositories.

• Design and implement a branching strategy and pull-request/code-review workflow (trunk-based, GitFlow, branch policies)
• Design repository structure, scale Git (LFS, submodules, monorepo vs multi-repo), and secure/manage source control

Published band 50-55% (dominant domain). Designing and implementing CI (Azure Pipelines, GitHub Actions, YAML, self-hosted vs Microsoft-hosted agents, caching, templates), package management (Azure Artifacts, feeds, versioning), CD and deployment strategies (blue/green, canary, ring, feature flags), release orchestration and approvals, and infrastructure as code (Bicep, ARM, Terraform).

• Design and implement continuous integration (Azure Pipelines/GitHub Actions, YAML, agents/agent pools, caching, pipeline templates)
• Design and implement a package management strategy (Azure Artifacts feeds, versioning, upstream sources, dependency scanning)
• Design and implement deployment strategies (blue/green, canary, ring, feature flags) with release approvals and gates
• Design and implement infrastructure as code and environment provisioning (Bicep, ARM, Terraform, deployment tasks, environments)

Published band 10-15%. Designing and implementing a strategy for managing sensitive information (Azure Key Vault, secrets in pipelines, service connections), and automating security and compliance scanning (SAST/DAST, dependency and container scanning, GitHub Advanced Security, license/compliance).

• Manage sensitive information and secure the pipeline (Azure Key Vault, secret/variable groups, service connections, least-privilege)
• Automate security and compliance scanning (SAST/DAST, dependency and container scanning, GitHub Advanced Security, license compliance)

Published band 5-10%. Designing and implementing logging, telemetry, and monitoring (Azure Monitor, Application Insights, Log Analytics/KQL), and using observability to drive site reliability (alerts, dashboards, availability/health, feedback loops).

• Design and implement logging, telemetry, and application monitoring (Azure Monitor, Application Insights, Log Analytics/KQL)
• Use observability and alerting to drive site reliability and continuous feedback (alerts, dashboards, availability, SRE practices)