Five vendors publish the certification exam paths employers screen for most in 2026: AWS, Microsoft for Azure, Cisco, Fortinet and CompTIA. The short answer for anyone planning the year: pick the tier that matches your hands-on experience, not the title that sounds most impressive, because every ladder here assumes accumulated lab time rather than memorization. AWS extends an active certification by three years when you renew it and adds one year when you maintain it through AWS Skill Builder, a distinction that quietly decides how much a credential costs over a whole career. Microsoft refreshes its credentials yearly at no charge, Cisco and Fortinet gate their upper tiers behind lower ones, and CompTIA stays the vendor-neutral on-ramp that feeds into all the others.
AWS exam paths and renewal
AWS splits its portfolio into Foundational, Associate, Professional and Specialty tiers. Foundational credentials such as AWS Certified Cloud Practitioner need no prior experience, Associate exams recommend existing cloud or IT background, and the Professional tier states that 2+ years of AWS experience are required before you sit Solutions Architect or DevOps Engineer Professional. Specialty exams then go deep on single domains such as Security and Advanced Networking, and the newer AI-focused exams (AI Practitioner, Generative AI Developer Professional) have opened as separate registration paths.
Renewal is where budgets are won or lost. A renewal action stretches the credential for another three-year term measured from the date you complete it, while the maintenance route on AWS Skill Builder adds a shorter extension and needs an active subscription plus a certification within 90 days of expiration. Every certified individual also holds a 50% discount voucher for a future exam, which is how most candidates fund the recertification attempt. If you want to see how the Associate-level question style feels before committing, this AWS Certified Solutions Architect Associate practice exam breaks the format down item by item.
Microsoft Azure certification tracks
Microsoft runs two credential families: role-based Certifications earned by passing an exam, and Applied Skills earned through lab-based, scenario assessments. The certification ladder is explicitly progressive, supporting every career stage from Fundamentals to Associate, Expert and Specialty across AI, cloud, security and business roles, which makes Azure one of the few programs where you can start at a one-exam Fundamentals level and climb to expert without ever switching vendors. Microsoft renews eligible certifications annually at no cost through a short online assessment on Microsoft Learn, so the total cost of ownership sits well below vendors that require paid re-examination, provided you renew before the credential lapses.
Cisco certification ladder explained
Cisco structures its program as a ladder: Entry (CCST), Associate (CCNA), Professional (CCNP) and Expert (CCIE), spread across tracks that include Enterprise, Security, Data Center, Collaboration, Service Provider, Wireless and the newer Automation family. CCNA remains the widest-reaching single exam, validating networking fundamentals plus automation basics, while CCNP and CCIE require a core exam plus concentration or lab components inside one track. The program also issues shorter certificates, such as the Certificate in Ethical Hacking, for practitioners who need a focused proof of skill without committing to a full track. Cisco says it has issued more than 4 million certifications since the program began, which is both its strength and its caution: the credential opens doors, but the tracks are deep enough that choosing the wrong one costs months.
Fortinet NSE program structure
Fortinet’s NSE program stacks numbered levels rather than named tiers. NSE 1 through NSE 3 are completed through online courses and tests, and NSE 4 FortiOS is the first proctored exam, validating day-to-day FortiGate administration. From there the tracks fork into Secure Networking, SASE, Cloud Security and Security Operations. Fortinet requires NSE 4 certification before you can sit any NSE 5 proctored exam, and the same prerequisite logic climbs the ladder: NSE 6 also requires NSE 4, NSE 7 requires an NSE 5 or NSE 6 in the matching track, and NSE 8 caps the program with a core exam plus an elective practical exam for expert-level designers. Self-paced theory courses are free, which makes Fortinet the cheapest program on this list to start, with lab access and proctored exams as the paid steps. As a stacking bonus, Fortinet notes that NSE certifications earn Continuing Education Units toward renewing CompTIA Security+, PenTest+ and CySA+.
CompTIA credentials and stacking
The current CompTIA catalog runs from entry-level Tech+ through Security+ to the expert-tier SecurityX, with SecOT+ flagged as coming in Dec 2026. In between sit the classic core and specialist names hiring managers recognize on sight: A+ for support roles, Network+ for infrastructure, Security+ for defense, plus Data+, Linux+, PenTest+ and CySA+ for specialist positions, and a fast-growing Essentials family covering AI and data fundamentals. CompTIA’s value in a 2026 plan is portability: the credentials are vendor-neutral, so they pair cleanly with a vendor ladder such as Fortinet NSE or Microsoft’s Azure tracks without duplicating effort.
Choosing your 2026 path
| Vendor | Entry point | Core mid tier | Expert tier | Best fit |
|---|---|---|---|---|
| AWS | Cloud Practitioner (Foundational) | Solutions Architect – Associate | Solutions Architect / DevOps Engineer Professional, Specialty | Cloud architects, DevOps engineers |
| Microsoft | Fundamentals certifications | Associate certifications | Expert and Specialty certifications | Azure and AI platform roles |
| Cisco | CCST Networking | CCNA | CCNP, CCIE | Network and security engineers |
| Fortinet | NSE 1-3 online courses | NSE 4 FortiOS (proctored) | NSE 5-8 and Industry certifications | Network security operations teams |
| CompTIA | Tech+, A+ | Network+, Security+ | SecurityX | Vendor-neutral foundation and stacking |
Use this sequence to lock in a decision instead of collecting half-finished paths:
- Name the job title you want in 12 months and find it in the table above; the vendor column is your program.
- Audit your lab hours honestly, then enter one tier below where you think you belong.
- Map renewal rules before enrolling: free annual renewal (Microsoft), voucher-funded re-examination (AWS) or prerequisite ladders (Cisco, Fortinet).
- Add one vendor-neutral CompTIA credential if your target employers run mixed environments.
- Rehearse with a full-length practice set under timed conditions before booking the real exam.
That last step transfers across every vendor on this list, including specialist exams outside these five programs, such as this Red Hat Certified Specialist in OpenShift AI EX267 practice set. One ladder, fully finished, beats three abandoned at the Associate tier.