The Complete Azure Learning Roadmap — From Zero to Azure Solutions Architect

You want to learn Azure, but the sheer number of services — over 200 — makes it feel like staring at a wall of fog. Where do you start? What do you skip? When are you ready for a certification? This roadmap gives you a structured 6-month plan that takes you from absolute beginner to Azure Solutions Architect level, with weekly goals, monthly checkpoints, certification guidance, and links to every Azure post we have published on Goel Academy. Print this page, pin it to your wall, and check things off as you go.

The 6-Month Learning Plan

Month 1: Azure Fundamentals (Weeks 1-4)

The goal this month is to understand what cloud computing is, how Azure organizes resources, and how to navigate the portal and CLI confidently.

Week	Topics	Goel Academy Posts	Practice
1	Cloud concepts, Azure regions, AZs, resource hierarchy	Azure Fundamentals	Create free account, explore portal
2	ARM, resource groups, tags, locks, RBAC basics	Azure Resource Manager	Deploy resources via portal and CLI
3	Azure CLI, PowerShell, Cloud Shell	Azure CLI and PowerShell	Script 10 common tasks
4	Identity fundamentals: Entra ID, users, groups, MFA	Azure Entra ID	Set up Entra ID tenant, create users

Month 1 Self-Check:

• Can you explain the Azure resource hierarchy (Management Group > Subscription > RG > Resource)?
• Can you create and manage resources using both the portal and CLI?
• Can you explain the difference between Entra ID and on-premises AD?

# Month 1 skill verification — run all of these from memory
az group create --name rg-test --location eastus
az group list --query "[].{Name:name, Location:location}" -o table
az ad user list --query "[].{Name:displayName, UPN:userPrincipalName}" -o table
az role assignment list --resource-group rg-test -o table
az group delete --name rg-test --yes

Month 2: Core Infrastructure (Weeks 5-8)

Now you build real infrastructure — VMs, networking, storage, and databases.

Week	Topics	Goel Academy Posts	Practice
5	Virtual Machines, disks, images, scale sets	Azure Virtual Machines	Deploy Linux and Windows VMs
6	VNets, subnets, NSGs, peering, DNS	Networking Basics	Build a multi-subnet VNet with NSGs
7	Storage accounts, blobs, tiers, lifecycle	Azure Storage Accounts	Upload blobs, configure lifecycle rules
8	Azure SQL, Cosmos DB, database options	Azure SQL Databases	Deploy Azure SQL, run queries

Month 2 Self-Check:

• Can you deploy a VM with a custom VNet, NSG, and managed disk?
• Can you explain the four storage services and three blob tiers?
• Can you choose between Azure SQL Single DB, Elastic Pool, and Managed Instance?

# Month 2 skill verification
az vm create --name vm-test --resource-group rg-lab \
  --image Ubuntu2204 --size Standard_B2s --generate-ssh-keys
az network vnet create --name vnet-lab --resource-group rg-lab \
  --address-prefix 10.0.0.0/16 --subnet-name default --subnet-prefix 10.0.1.0/24
az storage account create --name stlabtest2026 --resource-group rg-lab \
  --sku Standard_LRS --kind StorageV2
az sql server create --name sql-lab-2026 --resource-group rg-lab \
  --admin-user sqladmin --admin-password "YourStr0ngP@ss!"

Month 3: Platform Services and Security (Weeks 9-12)

Move beyond IaaS into PaaS, serverless, and security foundations.

Week	Topics	Goel Academy Posts	Practice
9	App Service, deployment slots, custom domains	Azure App Service	Deploy a web app with staging slot
10	Azure Functions, triggers, bindings	Azure Functions	Build HTTP and timer-triggered functions
11	Key Vault, secrets, certificates, access policies	Azure Key Vault	Store secrets, reference from App Service
12	RBAC deep dive, custom roles, PIM	Azure RBAC and Security	Create custom RBAC role, test access

Month 3 Self-Check:

• Can you deploy an App Service with a staging slot and swap to production?
• Can you build a serverless function that reads from Key Vault?
• Can you create a custom RBAC role scoped to a resource group?

Month 4: DevOps, Monitoring, and Containers (Weeks 13-16)

This is where you transition from "I can build things" to "I can build things reliably."

Week	Topics	Goel Academy Posts	Practice
13	Azure DevOps: Repos, Pipelines, CI/CD	Azure DevOps Pipelines	Build and deploy pipeline for App Service
14	Azure Monitor, Log Analytics, KQL, alerts	Azure Monitor and Logging	Create alert rules, write KQL queries
15	AKS: clusters, node pools, deployments	Azure AKS Kubernetes	Deploy a multi-container app on AKS
16	Container Apps, ACR, container workflows	Azure Container Apps	Deploy microservice to Container Apps

Month 4 Self-Check:

• Can you write a YAML pipeline that builds, tests, and deploys an application?
• Can you write KQL queries to investigate an incident?
• Can you deploy and scale an application on AKS?

# Month 4 skill verification
az aks create --name aks-lab --resource-group rg-lab \
  --node-count 2 --enable-managed-identity --generate-ssh-keys
az aks get-credentials --name aks-lab --resource-group rg-lab
kubectl get nodes
kubectl create deployment nginx --image=nginx --replicas=3
kubectl expose deployment nginx --port=80 --type=LoadBalancer

Month 5: Advanced Architecture (Weeks 17-20)

Governance, disaster recovery, advanced networking, and infrastructure as code.

Week	Topics	Goel Academy Posts	Practice
17	Azure Policy, governance, compliance	Azure Policy and Governance	Assign policies, check compliance
18	Load balancers, Application Gateway, Front Door	Azure Load Balancer, Performance Optimization	Configure Application Gateway with WAF
19	Advanced networking: ExpressRoute, VPN, Private Link	Advanced Networking	Set up Private Endpoint for Storage
20	Disaster recovery, backup, Site Recovery	Azure Disaster Recovery	Configure VM replication with ASR

Month 5 Self-Check:

• Can you design a policy-driven governance model for a multi-subscription environment?
• Can you explain when to use Load Balancer vs Application Gateway vs Front Door?
• Can you design a DR strategy with defined RPO and RTO?

Month 6: Enterprise and Specialization (Weeks 21-24)

Tie everything together with enterprise patterns and validate with certifications.

Week	Topics	Goel Academy Posts	Practice
21	Bicep IaC, Terraform on Azure	Azure Bicep IaC, Terraform on Azure	Write Bicep/Terraform for full environment
22	Landing zones, management groups, enterprise-scale	Azure Landing Zones	Design a landing zone hierarchy
23	Azure Arc, hybrid cloud, automation	Azure Arc, Azure Automation	Onboard a non-Azure server to Arc
24	Security Center, Defender, cost optimization	Azure Security Center, Cost Management	Review Secure Score, optimize costs

Month 6 Self-Check:

• Can you write a complete environment in Bicep or Terraform?
• Can you design an enterprise landing zone with management groups, policies, and hub-spoke networking?
• Can you explain the Azure Well-Architected Framework's five pillars?

Certification Path

Certification	Level	Focus	Prep Time	Prerequisite
AZ-900	Fundamentals	Cloud concepts, Azure services	2-4 weeks	None
AZ-104	Associate	Azure administration	6-8 weeks	AZ-900 recommended
AZ-305	Expert	Solution architecture	8-12 weeks	AZ-104 required
AZ-400	Expert	DevOps engineering	6-8 weeks	AZ-104 recommended
AZ-500	Specialty	Security engineering	6-8 weeks	AZ-104 recommended

Recommended certification timeline:
Month 2 ──→ AZ-900 (validate fundamentals)
Month 4 ──→ AZ-104 (validate admin skills)
Month 6 ──→ AZ-305 (validate architecture) OR AZ-400 (validate DevOps)
Month 8+ ─→ AZ-500 (specialize in security)

Career Paths

Role	Key Skills	Certifications	Salary Range (US)
Azure Administrator	VMs, networking, storage, identity, monitoring	AZ-104	$90K-$130K
Azure Solutions Architect	Architecture design, governance, DR, multi-region	AZ-305	$130K-$180K
Azure DevOps Engineer	CI/CD, IaC, containers, AKS, automation	AZ-400	$120K-$170K
Azure Security Engineer	Defender, Sentinel, RBAC, Zero Trust, compliance	AZ-500	$120K-$165K

Practice Resources

Resource	Type	Cost
Azure Free Account	12 months free services + $200 credit	Free
Microsoft Learn	Interactive tutorials, sandboxes	Free
learn.microsoft.com/training	Self-paced learning paths	Free
Azure Architecture Center	Reference architectures, best practices	Free
Azure Charts	Service comparison tool	Free
Goel Academy Azure Series	30 posts, practical focus	Free
Azure Friday (YouTube)	Weekly video series from Microsoft	Free

Skills Checklist

Use this checklist to track what you have mastered. Check each item only when you can do it from memory without documentation.

FUNDAMENTALS
[ ] Create and manage resource groups, tags, and locks
[ ] Navigate Azure portal, CLI, and Cloud Shell
[ ] Explain Azure regions, AZs, and resource hierarchy
[ ] Configure Entra ID users, groups, and MFA

INFRASTRUCTURE
[ ] Deploy and manage VMs with managed disks
[ ] Create VNets, subnets, NSGs, and peering
[ ] Configure storage accounts and blob lifecycle
[ ] Deploy and query Azure SQL databases

PLATFORM SERVICES
[ ] Deploy App Service with deployment slots
[ ] Build Azure Functions with triggers and bindings
[ ] Store and retrieve secrets from Key Vault
[ ] Configure RBAC roles and assignments

DEVOPS & CONTAINERS
[ ] Write CI/CD pipelines in Azure DevOps or GitHub Actions
[ ] Deploy and monitor applications on AKS
[ ] Build and push images to Azure Container Registry
[ ] Write infrastructure as code with Bicep or Terraform

MONITORING & SECURITY
[ ] Configure Azure Monitor alerts and dashboards
[ ] Write KQL queries in Log Analytics
[ ] Implement Azure Policy for governance
[ ] Use Defender for Cloud to improve Secure Score

ARCHITECTURE
[ ] Design multi-region high availability
[ ] Implement disaster recovery with defined RPO/RTO
[ ] Design enterprise landing zones with governance
[ ] Optimize costs with reservations, right-sizing, and auto-scaling

All 30 Goel Academy Azure Posts by Topic

Fundamentals (Month 1)

1. Azure Fundamentals — Cloud concepts, regions, resource hierarchy
2. Azure Resource Manager — ARM, templates, resource groups
3. Azure CLI and PowerShell — Command-line management
4. Azure Entra ID — Identity, authentication, MFA

Core Infrastructure (Month 2)

5. Azure Virtual Machines — VMs, disks, scale sets
6. Azure Networking Basics — VNets, subnets, NSGs
7. Azure Storage Accounts — Blobs, files, queues, tables
8. Azure SQL Databases — SQL DB, Elastic Pools, MI

Platform Services (Month 3)

9. Azure App Service — Web apps, APIs, slots
10. Azure Functions — Serverless compute
11. Azure Key Vault — Secrets, keys, certificates
12. Azure RBAC and Security — Roles, custom roles, PIM

DevOps and Containers (Month 4)

13. Azure DevOps Pipelines — CI/CD, YAML pipelines
14. Azure Monitor and Logging — Metrics, logs, KQL
15. Azure AKS Kubernetes — Managed Kubernetes
16. Azure Container Apps — Serverless containers

Governance and Networking (Month 5)

17. Azure Cost Management — Budgets, reservations, optimization
18. Azure Policy and Governance — Policies, initiatives, compliance
19. Azure Load Balancer — L4/L7 load balancing
20. Azure Advanced Networking — ExpressRoute, VPN, Private Link
21. Azure Security Center — Defender, Secure Score
22. Azure Disaster Recovery — ASR, backup, DR strategies

Enterprise (Month 6)

23. Azure Bicep IaC — Infrastructure as Code with Bicep
24. Azure Automation — Runbooks, DSC, patching
25. Azure Landing Zones — Enterprise-scale architecture
26. Terraform on Azure — Modules, state, CI/CD
27. Azure Arc — Hybrid and multi-cloud management
28. Azure Performance Optimization — CDN, Redis, Front Door
29. Azure Interview Questions — 50 questions, three levels
30. Azure Complete Roadmap — This post

---

This roadmap is a living document. Bookmark it, come back every week, check off what you have learned, and move forward. The gap between "I want to learn Azure" and "I am an Azure Solutions Architect" is not talent — it is consistency. Six months of focused learning, hands-on practice, and certification preparation will get you there. Start today with the Azure free account and the first post in the series. The cloud is not going anywhere, but your career can go a lot further with it.