Vibe Engines
YouTube

Vibe Engines is free, interactive AI engineering & system design — runs in your browser. Pick a learning path

Roadmap · 2026 Edition

Platform
Engineer.

18 stations. 3 tracks. From Linux and containers to Kubernetes, infrastructure-as-code and CI/CD, then internal developer platforms, golden paths and SRE — become the engineer who builds the platform everyone else ships on.

Foundations
~6h 0/6
The Platform
~6h 0/6
Scale & SRE
~6h 0/6
0 of 18 stations · ~0h of ~17h

The roadmap.

18 stations on 3 ladders, in order — each rung is written assuming the one above it. Mark them off as you go; your progress is saved in this browser.

0 / 18
Pick up at
Track 1 of 3

FoundationsStart here

6 rungs · ~6h · ends at Programming for Platforms.

0/6 done
  1. Linux & the Shell

    Start here

    F1 · Beginner · 55 min

    Everything a platform runs on is Linux, and the shell is where you live. Learn the filesystem, processes and signals, permissions, systemd, and enough shell scripting to automate the boring things — because a platform engineer who fears the terminal is a platform engineer who copy-pastes runbooks.

    • Filesystem & permissions
    • Processes, signals & systemd
    • Shell scripting
    • Text tooling (grep/sed/awk)

    Build itA service is eating memory on a box. Find the process, read its limits, and restart it cleanly — all from the shell.

    ✓ CheckpointExplain what a signal does to a process, and why kill -9 is the one your service never gets to handle.

  2. Networking for Platforms

    F2 · Beginner · 55 min

    Distributed systems are networking problems wearing trench coats. Learn TCP/IP, DNS, HTTP, load balancing and TLS, plus the cloud-native additions — service discovery, ingress, and why "it works locally but not in the cluster" is almost always a networking answer.

    • TCP/IP & DNS
    • Load balancing & TLS
    • Service discovery
    • Ingress & routing

    Build itA pod can’t reach a database by name. Walk the resolution path — DNS, service, network policy — and find where it breaks.

    ✓ CheckpointTrace a request from an ingress to a pod and name every hop. Any gap you cannot narrate is one you cannot debug.

  3. Containers

    F3 · Beginner · 60 min

    Containers are the unit a platform ships. Learn what a container actually is (namespaces + cgroups, not a VM), how image layers and caching work, writing Dockerfiles that build fast and ship small, and registries — the foundation the entire orchestration stack sits on.

    • Namespaces & cgroups
    • Image layers & caching
    • Dockerfiles & multi-stage
    • Registries

    Build itCut a 1.2 GB image to under 100 MB with a multi-stage build. What did the fat version ship that production never needed?

    ✓ CheckpointExplain why Docker layer order changes build time, and which line invalidates your cache most often.

  4. Cloud Fundamentals

    F4 · Intermediate · 60 min

    Platforms are built on cloud primitives. Learn compute, storage and networking building blocks, IAM and the shared-responsibility model, managed services vs self-hosted trade-offs, and the cost awareness that separates a platform engineer from a big cloud bill.

    • Compute/storage/network primitives
    • Cloud IAM
    • Managed vs self-hosted
    • Cost awareness

    Build itChoose between a managed database and self-hosting one on Kubernetes. List the trade-offs your team will actually feel.

    ✓ CheckpointDraw the shared responsibility line for a managed service, and name what you wrongly assumed the provider handles.

  5. Git & Version Control

    F5 · Beginner · 45 min

    GitOps means Git is the platform’s source of truth, so you must understand it deeply. Learn Git’s object model, branching strategies, and why declarative infrastructure lives in repositories — the substrate every modern deployment workflow is built on.

    • Git internals & objects
    • Branching strategies
    • Git as source of truth
    • PR workflows

    Build itExplain why "the cluster state should equal what’s in Git" is the whole idea of GitOps — and what breaks when it isn’t.

    ✓ CheckpointExplain when rebase is right and when it rewrites history someone else has already pulled.

  6. Programming for Platforms

    F6 · Intermediate · 55 min

    Platform engineering is software engineering aimed at infrastructure. Learn Go or Python well enough to write operators, controllers and CLIs, work with APIs and YAML/JSON, and treat your platform as a product with code — not a pile of shell scripts nobody dares touch.

    • Go / Python for infra
    • APIs & serialization
    • CLIs & automation
    • Testing infra code

    Build itWrite a small script that reconciles desired vs actual state for a resource. You just built the core idea of a controller.

    ✓ CheckpointExplain what makes a platform script idempotent, and why that matters more than whether it is short.

Track 2 of 3

The PlatformThe craft

6 rungs · ~6h · ends at Platform Security.

0/6 done
  1. Kubernetes Core

    T1 · Intermediate · 70 min

    Kubernetes is the platform engineer’s operating system. Learn pods, deployments, services and the control loop that makes it all work — desired state reconciled continuously. Master kubectl, understand the scheduler, and grasp why "declare what you want, let the controller converge" is the whole philosophy.

    • Pods, deployments, services
    • The reconciliation loop
    • kubectl & the scheduler
    • Declarative state

    Build itA deployment won’t roll out. Use describe, events and logs to diagnose it — the debugging loop you’ll run a thousand times.

    ✓ CheckpointExplain what the control loop does when you delete a pod by hand, and why that is the whole idea.

  2. Kubernetes in Depth

    T2 · Advanced · 70 min

    Past the basics lies the real platform. Learn ConfigMaps and Secrets, RBAC, network policies, storage and StatefulSets, resource requests/limits, and Helm or Kustomize for packaging — the pieces that turn "runs a container" into "runs a company’s workloads safely".

    • Config & secrets
    • RBAC & network policies
    • StatefulSets & storage
    • Helm / Kustomize

    Build itPackage an app with Helm so any team can deploy it with three values. What do you expose, and what do you lock down?

    ✓ CheckpointExplain what a readiness probe changes that a liveness probe does not, and what breaks when you swap them.

  3. Infrastructure as Code

    T3 · Advanced · 65 min

    Clicking in a console doesn’t scale and can’t be reviewed. Learn Terraform (or OpenTofu/Pulumi): declarative infrastructure, state management and its dangers, modules for reuse, and the discipline that makes your entire cloud reproducible from a repository and a plan.

    • Terraform / OpenTofu
    • State & its dangers
    • Modules & reuse
    • Plan / apply discipline

    Build itTwo engineers run terraform apply at once and corrupt state. Explain what happened and how remote state + locking prevents it.

    ✓ CheckpointExplain what Terraform state protects, and what happens when two engineers apply at once.

  4. CI/CD & GitOps

    T4 · Advanced · 65 min

    The platform’s job is to move code to production safely and often. Learn pipeline design, build/test/deploy stages, GitOps with Argo CD or Flux (the cluster pulls desired state from Git), and progressive delivery — canary and blue-green — so deploys are boring instead of terrifying.

    • Pipeline design
    • GitOps (Argo/Flux)
    • Canary & blue-green
    • Rollback strategy

    Build itDesign the deploy path where a bad release auto-rolls-back on failing health checks. What signal triggers the rollback, and when?

    ✓ CheckpointExplain what GitOps reconciliation does when someone changes the cluster by hand.

  5. Observability

    T5 · Advanced · 60 min

    You can’t operate what you can’t see. Learn the three pillars — metrics, logs, traces — plus Prometheus and Grafana, structured logging, distributed tracing, and how to build dashboards and alerts that answer "is it broken and why?" without drowning on-call in noise.

    • Metrics, logs, traces
    • Prometheus & Grafana
    • Structured logging
    • Dashboards & SLO alerts

    Build itA request is slow across five services. Which pillar tells you where the time went — and what must be instrumented for it to work?

    ✓ CheckpointExplain which of metrics, logs and traces answers “is it broken”, “why”, and “where”.

  6. Platform Security

    T6 · Advanced · 55 min

    The platform is the blast radius for everyone on it. Learn secrets management, image scanning and supply-chain security, policy-as-code (OPA/Kyverno), and the paved-road principle: make the secure way the easy way, so every team gets security by default without becoming security experts.

    • Secrets & image scanning
    • Policy-as-code (OPA)
    • Supply-chain security
    • Secure paved roads

    Build itWrite a policy that blocks any pod running as root from being admitted. Why enforce it at the platform, not in each team’s YAML?

    ✓ CheckpointExplain why a pod running as root is a risk even inside a private cluster.

Track 3 of 3

Scale & ReliabilityOperate at scale

6 rungs · ~6h · ends at Platform as a Product.

0/6 done
  1. Site Reliability Engineering

    P1 · Advanced · 60 min

    SRE is the discipline of running things reliably with engineering, not heroics. Learn SLIs, SLOs and error budgets, the toil-reduction mandate, capacity planning, and the culture that treats reliability as a feature you can measure, budget and trade against velocity.

    • SLIs, SLOs, error budgets
    • Toil reduction
    • Capacity planning
    • Reliability as a feature

    Build itSet an SLO for an API and the burn-rate alerts around it. When does the error budget say "stop shipping features and fix reliability"?

    ✓ CheckpointExplain what an error budget lets you say no to — and what it lets you say yes to.

  2. Internal Developer Platforms

    P2 · Advanced · 60 min

    The frontier of the discipline: building the platform product itself. Learn golden paths, self-service provisioning, platform portals (Backstage), and the paved-road philosophy — abstracting Kubernetes complexity so a product engineer ships a service in an afternoon, not a fortnight.

    • Golden paths
    • Self-service provisioning
    • Backstage & portals
    • Abstracting complexity

    Build itDesign the "new service" button: what does a product team fill in, and what does the platform generate — repo, pipeline, infra, dashboards?

    ✓ CheckpointExplain why a platform nobody adopts is a failed platform, however good the technology.

  3. Incident Management

    P3 · Advanced · 55 min

    Everything breaks; what matters is how you respond. Learn on-call that doesn’t burn people out, incident command, effective runbooks, and blameless post-mortems that turn outages into permanent fixes instead of repeated 2am pages and quiet resentment.

    • On-call design
    • Incident command
    • Runbooks
    • Blameless post-mortems

    Build itDesign an on-call rotation for a 6-person team that is humane AND covers 24/7. What automation removes the pages nobody should get?

    ✓ CheckpointExplain why alerting on symptoms beats alerting on causes, and what a 3am page should mean.

  4. Cost & Efficiency (FinOps)

    P4 · Intermediate · 50 min

    A platform that ignores cost gets a very unpleasant meeting. Learn cloud cost visibility, right-sizing, autoscaling, spot instances, and FinOps practices that give teams the cost feedback to make good trade-offs — because the cheapest architecture nobody can operate is not actually cheap.

    • Cost visibility & tagging
    • Right-sizing & autoscaling
    • Spot & savings plans
    • FinOps culture

    Build itYour cluster runs at 20% utilization "for safety". Design the autoscaling that keeps headroom without paying for idle nodes all night.

    ✓ CheckpointExplain how idle resources accumulate on a platform and who is incentivised to notice.

  5. Multi-Cluster & Scale

    P5 · Advanced · 55 min

    One cluster becomes many: regions, environments, tenants. Learn multi-cluster patterns, service meshes (Istio/Linkerd) for traffic and mTLS, multi-tenancy isolation, and the disaster-recovery and failover design that keeps a global platform up when a region goes dark.

    • Multi-cluster patterns
    • Service mesh
    • Multi-tenancy isolation
    • DR & failover

    Build itA whole region fails. Trace what keeps serving and what doesn’t under your failover design — and what data you might lose.

    ✓ CheckpointExplain what multi-cluster buys you and the operational cost you just took on.

  6. Platform as a Product

    P6 · Intermediate · 45 min

    The mindset shift that defines senior platform engineers: your users are developers, and the platform is a product they choose to use. Learn to gather feedback, measure adoption and developer experience, treat internal teams as customers, and grow from running infrastructure to shaping how a whole org ships.

    • Developers as users
    • Adoption & DX metrics
    • Platform roadmapping
    • IC to leadership

    Build itTeams keep bypassing your platform for their own scripts. Diagnose it as a product problem — what does your "product" get wrong?

    ✓ CheckpointName your platform's users and the last thing you shipped because they asked, rather than because it was interesting.

Platform Engineer roadmap — frequently asked questions

The common questions before you start — how long it takes, whether to follow it in order, and how it stays current.

How long does this roadmap take?

It runs 18 stations across 3 tracks — roughly ~17h of focused learning, plus the time you spend actually building. It is self-paced, so most people work through it over a few weeks, an evening or a single station at a time.

Do I have to follow the stations in order?

The tracks are ordered so each station builds on the one before, and following them start to finish is the intended path. But every station also stands alone — if you already have the foundations, jump straight to the part you need.

Is it free?

Yes. The whole roadmap, and every handbook, lab, and challenge it links to, is free and open — no sign-up and no paywall.

How is the roadmap kept current?

It teaches the durable fundamentals of the role first, then the tooling and the AI-era shifts on top — so most of it stays relevant as individual tools churn, and it is revised as the role itself changes.

Who is this roadmap for?

Anyone stepping into or leveling up in the Platform Engineer role — whether you are switching in, early-career, or a senior filling gaps. Start where you are; the ladder shows what is left.

Finished this one? 0 / 31 Roadmaps done
NextThe AI-Era DevOps Engineer Next in “From Sysadmin to DevOps / SRE” · step 5 of 6

Explore the topic

See this alongside everything else on the same subject — handbooks, system designs, challenges and tools, in one place.

More Roadmaps