Cloud Security Architect & DevSecOps

Design secure cloud architectures and build security into the delivery pipeline. In this Level III course you take the architect’s seat for ORBIT, Odapeeka State University’s research cloud (a fictional case), and ship it secure: threat model, landing zone, infrastructure as code, pipeline, cluster, data protection and detection.

What you’ll do

• Threat model a cloud application and write design reviews and architecture decision records
• Design a guardrailed landing zone in Terraform and prove it with policy as code
• Take infrastructure as code to zero high findings and block whole classes of misconfiguration
• Harden a CI/CD pipeline: keyless auth, SBOMs, scan gates, signed images and gated deploys
• Lock down a Kubernetes cluster with admission control, RBAC, network policy and runtime alerts
• Design a key hierarchy, residency, backup and recovery for research data
• Ship detections as code, one auto-remediation and a cloud incident playbook
• Map controls to automatically collected evidence

How the labs work

Every student gets a private, isolated cloud sandbox with no internet access. Labs give you an objective and acceptance checks, not step-by-step recipes. A lab checker confirms your controls block known-bad changes.

How you finish

• Complete every lesson
• Pass the capstone, the ORBIT Secure Architecture Package: at least 80% on the published rubric with no row at the lowest score. The Cover6 AI grader scores it, and you can resubmit.
• Score at least 70% on the final knowledge check (unlimited attempts)

Finishing earns Cover6 Cloud Security, Level III. Your certificate shows the course, the completion date and your CPE hours, and anyone can check it at cover6solutions.com/verify.

Exam prep included

Includes the Cover6 ISC2 CCSP exam prep course. Each topic maps to the CCSP domains. CCSP is a registered mark of ISC2. Cover6 is not affiliated with ISC2.

DoD 8140

Aligned with DoD 8140 work roles Security Architect (652), DevSecOps Specialist (627) and Software/Cloud Architect (628).

Before you start

Entry: Cloud Security Engineer Prep, or equivalent experience.

Your next step

After this course, take on the Cover6 Cloud Challenge, a separate elite challenge that proves your skills under pressure.