CertQuests
From sysadmin to SRE in 12 months.
Sysadmin to SRE is the highest-leverage pivot in infrastructure. You already know Linux, DNS, on-call, and what 3am paging feels like — everything SRE interviews actually test. The 12-month plan: lock down Terraform fundamentals, ship one production-grade module, then 5–6 months on the CKA plus a real coding artifact in Python or Go. Salary delta is roughly +$35–55k base, sustained, with meaningful equity at venture-backed shops.
The two failure modes are (1) collecting certs without ever writing code, and (2) treating Kubernetes as a YAML-editing exercise instead of an API to program against. The plan below is built to avoid both.
Why this pivot works in 2026
SRE demand has decoupled from generalist DevOps hiring. The U.S. Bureau of Labor Statistics tracks computer-systems and network roles at a 2024 median of $130,390 and projects 13% growth through 2033, but SRE titles sit at the top of that band because the supply of engineers who can both write Go and triage a production incident is structurally short. Sysadmins are the cleanest feeder pool: you already understand systemd, cgroups, kernel limits, and what a misbehaving DNS server does to a service mesh. That intuition compounds against a fresh CS-grad SRE candidate who has only seen happy-path Kubernetes.
The 12-month sequence
Three phases of four months. Each phase has one cert plus a tangible code artifact. Skip either side and the phase doesn’t count.
Months 1–4 — Code + IaC fluency (Terraform Associate 003)
- Cert: HashiCorp Terraform Associate 003 ($70.50, ~50 study hours, ~75% first-attempt pass rate). Cheapest credential in the stack and the one that proves you can think in declarative state, not bash scripts.
- Artifact: a public Terraform module on GitHub that provisions a non-trivial AWS or GCP stack (VPC + ALB + ECS or GKE node pool) with proper variables, outputs, and a working CI job. This becomes interview proof-of-skill.
- Coding: 4 hours/week on Python or Go. Pick one and stay there. By month 4 you should be writing a small CLI tool that calls the AWS or GCP SDK without copy-pasting.
Months 5–8 — Kubernetes as an API (CKA)
- Cert: Certified Kubernetes Administrator ($445, ~120–180 study hours, ~60% first-attempt pass). The exam is fully practical and weighted toward troubleshooting and cluster operations — exactly what SRE day-one work looks like.
- Artifact: a working Helm chart or a tiny Kubernetes operator written in Go using kubebuilder. The bar is “reconciles a custom resource into a Deployment.” This is the single most asked-about portfolio item in SRE interviews in 2026.
- The burnout month is month 7. Most candidates hit the wall on networking troubleshooting (CNI plumbing, kube-proxy modes, NetworkPolicy debugging). Plan a one-week pause, then come back to it. Skip this and you fail the CKA practice exam.
Months 9–12 — Observability + applications
- Cert (optional): AWS SAA-C03 or GCP Associate Cloud Engineer if your target metro is cloud-shop heavy. Many SRE postings list a cloud associate as preferred; few require it once CKA is on the resume.
- Artifact: one Prometheus exporter (Go or Python) shipping real metrics from a service you run, plus a Grafana dashboard and a documented SLO. This proves you understand SRE’s actual job (error budgets, not heroics).
- Apply month 10 onward. 5–8 applications per week, targeting venture-backed product companies (Stripe, Datadog-tier mid-market, fintech infra) and large-enterprise platform teams. Junior SRE postings expect CKA plus code samples; postings that demand 5+ years are mis-leveled, apply anyway if interested.
- Salary anchor: $115–140k in mid-cost metros, $155–185k coastal/FAANG-adjacent. Below $110k means the role is “DevOps in a trench-coat” and the on-call rotation will own your weekends; negotiate or walk.
The investment math
Cash outlay: Terraform Associate $70.50 + CKA $445 (one retake bundled in 2026) + optional AWS SAA-C03 $300 = ~$815, plus $20–40/month for KodeKloud or a Killer.sh practice subscription (~$300 over 12 months). Round to $1,150 hard cash. Time investment is roughly 500 focused hours. At a $35/hour sysadmin opportunity cost, total investment lands near $18,650.
Expected return: a $35–55k base salary increase (call it $42k median), sustained, with 10–20% bonus and stock at venture-backed shops typically adding another $15–40k/year on top. Payback is roughly 5–7 months after starting the new role. Five-year cumulative delta usually exceeds $260,000 before counting the typical SRE-to-Senior-SRE promotion at year 2–3.
When to deviate from the plan
- You already hold RHCSA and 5+ years sysadmin. Compress phase 1 to 8 weeks; spend the saved time doubling your Go coding load.
- You target platform engineering rather than classic SRE. Replace phase 3’s cloud associate with the Argo CD GitOps Practitioner badge plus a working internal-developer-platform demo. Same timeline.
- You are aiming for cleared infra work. Keep CKA, add Security+ (DoD 8140 II) in phase 3, and target Anduril, Booz Allen, or Leidos. Cleared SRE starting offers run $135–165k.
Bottom line
Sysadmin to SRE in 12 months is achievable specifically because your existing sysadmin tickets are SRE training in disguise — you just have to add code, declarative thinking, and Kubernetes as an API. Three certs (one optional), three artifacts on GitHub, three phases. The candidates who finish are the ones who refuse to skip the coding requirement and produce evidence at the end — Terraform module, Helm chart or operator, Prometheus exporter with a real SLO. The ones who don’t finish almost always trip on month 7 (Kubernetes networking) or never push code to GitHub. Plan for both.
Start phase 2 right now — no signup
CertQuests has engineer-written practice questions for the CKA, Terraform Associate, and AWS SAA-C03 with full explanations on every answer. Free, no account required.
Frequently asked questions
Can you really pivot from sysadmin to SRE in 12 months?
Yes, if you already have 2+ years of Linux sysadmin experience and you treat coding as non-negotiable. The plan assumes 10–12 hours of focused study per week plus a public GitHub repo with at least one production-style Terraform module and one Kubernetes operator or controller. Without working Python or Go, the realistic timeline stretches to 18 months.
Is the CKA really required for SRE jobs?
It is the closest thing to a hard floor for SRE roles at companies that actually run Kubernetes (which by 2026 is most of the Fortune 500). LinkedIn job-post analysis shows CKA listed in 55–65% of SRE postings versus 20–30% for any AWS cert. Internal SRE teams at hyperscalers (Google, Meta, Stripe) hire on interview performance instead, but for first SRE roles at non-FAANG shops CKA clears most of the resume screen.
Do I need Python or Go before applying?
You need one, fluently enough to write a 200-line operator or a Prometheus exporter without copying from Stack Overflow. Python is the lower-friction starting point for sysadmins; Go pays better long-term because the entire CNCF stack is written in it. Skipping the coding requirement is the single biggest reason sysadmin-to-SRE pivots stall: SRE interviews now uniformly include a coding round, not just a Linux trivia round.
What salary should I expect after the pivot?
SRE salaries in 2026 range from $120,000 to $185,000 base depending on metro and seniority. Mid-cost metros pay $115–140k for first SRE roles; coastal tech reaches $155–185k with stock on top. Levels.fyi shows SRE I/II clustering around $145k base nationally. Senior Linux sysadmin medians sit around $85–95k, so the delta is roughly $35–55k base plus 10–20% bonus and meaningful equity at venture-backed shops.
Should I stay in my sysadmin job during the pivot?
Yes. Production ticket queues teach the failure modes SRE interviews actually grill on: noisy neighbor, DNS, certificate rotation, capacity drift. Stay in the sysadmin role through month 11, apply during months 10–12, and resign only after signing. The candidates who quit early to study full-time consistently take longer to land an offer, not shorter.
How we wrote this
No bootcamp or training-vendor revenue. Salary anchors come from the BLS Occupational Outlook Handbook (2024 median $130,390 for the broader systems / network architect bucket), cross-referenced against SRE postings on LinkedIn and Indeed and self-reported offers on Levels.fyi as of Q2 2026. CKA cost and curriculum reflect the official CNCF exam page and Linux Foundation pricing as of May 2026; Terraform Associate cost reflects the HashiCorp store list price. Investment math uses a $35/hour sysadmin opportunity cost. The 12-month timeline reflects observed pivots in the CertQuests community over 2024–2026; faster timelines exist but are not the median. Tell us what you’d update.
Last reviewed: May 16, 2026.