1

I recently started my first IT job right out of college as an Information Security Analyst at my local hospital. They are big on education here and my boss has asked me to provide him with a 5 year plan for certifications that I want to get.

Right now, I am planning on getting my A+ by the end of this year, and hopefully continuing with obtaining the Network+ and Security+ certs. I’d like to finish out the 5 year plan with obtaining my CISSP. Also, the CEH has caught my eye.

I’m wondering, though, what certifications do you guys recommend? Which ones should I be focused on first? There are a lot to choose from and any help narrowing them down to the ones that really matter would be appreciated!

Also, although I may be in a security position right now, I’m also interested in other areas of IT/Management so don’t feel like you have to limit it to security only.

Oh, and feel free to “show off” and list the certifications you have! :slight_smile:

11 Spice ups
2

The certs you take will depend on which path you want to go to. Will the company pay for the certs? If you want to go the Networking side of IT, then the CISCO path is a good choice to take. If you want to go the Windows server path, then go for MCSA/MCSE. The “+” certs like A+, N+, and Security+ are good ones too. Many will say A+ is a waste of time but I disagree specially if you’re just starting in IT unless you already have 2+ years of experience under your belt.

The only cert I have right now is A+. School gave it for free when I was in college and I’m two exams away for the MCSA Server 2012 R2.

My certification plan is getting N+ and Security+ after I achieve the MCSA then go for MCSE and ITIL.

Good luck!!

3 Spice ups
3

Yes, they will pay for the certs. Personally, I like the idea of being a “jack of all trades”, so the best certs in different areas of IT are what I’m looking for, but I will probably be more focused on the security side of things due to my job title at the moment. The only experience I have is a Bachelors in Computer Science, so I’m definitely going to go for the A+ and knock that out first!

4

I’d forget the CEH and look at OSCP, perhaps with a couple of SANS course/certs beforehand

Doing the CISSP will be fairly easy if you’ve got the experience, 5 mile wide 1 inch deep curiculum…

1 Spice up
5

Go for the + ones first to get a good grasp of some basic networking and security (N+ & Sec+) then go CCNA and MCSA for some semi advanced server and networking. Not sure what to recommend for the security side of IT. I haven’t really looked into it.

3 Spice ups
6

5 year plan for certs?

If you start out, it is unlikely you are going to stay 5 years with the same company…
Also most certs expire after 1 to 3 years…

Just like Adrin said, we can recommend whatever, it really depends where you want to go and be in 5 years.
It’s no help if we suggest CCNA, but you never are going to touch a router again, or MCSA/E and the you want to become a Linux admin, etc. ¯_(ツ)_/¯

If security, you are pretty much right on, Sec+, CASP, CISSP, (especially if they pay for it, I’d get all the certs I can…

7

I assume you passed the 70-410, that means you have the Microsoft Certified Professional (MCP) certification! Yay for you, that is two certifications!

I agree with his statements though. Figure out what you are interested in and find a track for that field. I am not a security professional, so I cannot recommend what to focus on. I am currently studying for my MSCA in Server 2012 (1 exam away) because it relates heavily to my job and the knowledge that I am gaining is extremely beneficial to me. Focus on what you are doing in your job or what you want to do. If you just get certifications and don’t apply what you are learning, then the knowledge will go away.

2 Spice ups
8

Oh, right. I have two! :slight_smile:

2 Spice ups
9

I agree with the other posts as far as getting the “+” certs first. My last employer stated that it wasn’t really necessary to get them and that it was a waste of time. Most jobs these days require at least an A+ or at least x amount of experience. My current employer is gracious enough to help with all certs and cert prep classes. It is very advantageous for not only you but the employer as well - having staff that is certified in different skills. I will probably be going for A+, Net+, Sec+ CCENT and then CCNA. Let us know what you choose and how you go about getting them!

1 Spice up
10

If you want to go into management, ITIL v3 is crucial these days.

You want to learn and understand networking, get your CCNA/NP

You want to become a sys admin, get your MSCA → MSCE

You want to be a desk monkey, comptiA+

You want to be a programmer, experience and build an application and bring it to the interview.

You want to become a Solutions Architect, get CCNP, MSCE, ITIL v3, AWS SA

You want to become a Salesman, go into the interview and make them hire you on the spot, show them they need you.

11

I am sorry to be the one to say this but a “Jack of all trades” will hit glass ceilings, you will stay as a sys admin, desk monkey until you start to specialise in a field. I am currently a “jack of all trades, master of none” kinda guy, however, I have started to specialise in Cloud Computing and Virtualisation.

12

That’s an awesome learning opportunity - good for you! I hope they’re footing the bill too!

1 Spice up
13

A lot of my certifications have expired as I have been in grad school for the last five years; however, I have held: CCNA, CCNP, A+, Linux+, Project+, CTT+, MCSA: Security, MCSA: Messaging, MCSE, MCT, ITIL Foundations, and RHCE. Maybe one or two others… I forget.

Now I have an MBA and a Masters in Management and Leadership and let my staff handle the day-to-day.

Anyway, the way I pursued my certifications. Every year I would look at the report of the “hottest” certifications, I would pick the one or two that interested me and that would be my goal. The point of certifications is to advance your career; picking the most in demand cert that year seemed to work well for me. I’ve been fairly successful over the last 15 years.

Good luck.

1 Spice up
14

eyebrow raise

Certified Ethical Hacker isn’t a “jack of all trades” certification.

15

Haha very true. I guess by “jack of all trades” I meant getting “basic” certs in the majority of IT fields, and then since I’m in security I’d like to focus on getting all of my specialized and advanced certs in that field.

1 Spice up