| A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | Level | Student - L0 | Specialist - L1 | Professional - L2 | Expert - L3 | |||||||||||||||||||||
2 | IT Fundamentals | |||||||||||||||||||||||||
3 | 1 | Operation Systems | What is os, identify own os, differentiate OSs, | Can install os, user management, software installation | can implement and troubleshoot system restrictions, host FW rules, permissions, processes mgmt, networking. | Advanced user of CLI, can troubleshoot any kind of problem, RHCSA, | ||||||||||||||||||||
4 | 2 | Computer architecture | Knows basic construction of computer | Knows how to connect devices (monitor, mouse, keyboard, speakers, power cords, network cable and hardware parts) and make working scheme | can fix computer hardware, replace computer parts to new, | can fix any computer problem, | ||||||||||||||||||||
5 | 3 | File systems | Basic knowledge of fs trees, types of fs | Able to comfortly work with fs in the command line | able to work with partiotioning in both windows and linux systems, able to find, read and understand logs, debug | Repair badly damaged filesystem | ||||||||||||||||||||
6 | 4 | Storage | Able to describe the difference types of disks, raid, ftp, ftp server | knows how to work with ftp, know how to set up raid | can set up a new file server, can troubleshoot all the related troubles, | can troubleshoot any kind of problems (hardware and software) related to storage disks | ||||||||||||||||||||
7 | 5 | Programming | Can write lightweight code for example 'Hello World' or how to write calculator | Can write code for specific tasks, for example to parse some text (logs, config files) | Deep knowledge at one programming language : с++,Python, Java... Works well in IDE | Source code management,SQL,In-depth understanding of programming languages | ||||||||||||||||||||
8 | 6 | Networking | Should be able to explain basic networking concepts: ip add. subnet, mask, net.devices, types of media | should be able to setup network settings in any endpoint os, basic tshoot(ping, tracert) decent knowledge of dns, dhcp, mac address, ip address | should be able to desigh,implement and troubleshoot networking (vpn,routing loops, all rouiting protocols, vlans, wlan, wireshark, tcpdump, telnet,nmap) in the networking device(router, switch, ap-controller) any vendor in soho, | able to design, implement and troubleshoot geographically distributed highly-loaded network with thousands of users, CCIE | ||||||||||||||||||||
9 | 7 | Communicability | Very introverted, does not speak or eat lunch at the same table with their colleagues | Can start a chat on their own. Knows 2 languages. | Knows how to listen a person and hear their problem. Very sociable, heartwarming joker. | Same as pro + Very loud, you can hear their laugh through 10 layers of wall. Knows how to sing, how to play instruments and how to be cool. Knows 2 languages | ||||||||||||||||||||
10 | 8 | Virtualization | can explain the concept of virtualization and tools(kvm,vmbox,hyperv) | able to install virtualization software and set up a fully working new vm | can work with all virtualization softwares, can troubleshoot and able describe details of the problem, can migrate physical servers to virtual machines and vice versa,can differentiate full virtualization and paravirtualization | can troubleshoot through phone call, knows all the settings by memory | ||||||||||||||||||||
11 | 9 | Best practices | basic understanding of best practices | follows best practices as seniors have instructed | can find and set up the system according to best practices | create/edit best practices instructions and prove it | ||||||||||||||||||||
12 | 10 | Security | should be able to explain why security is needed, types of attacks, especially network attack | should be able to explain concepts of attack mitigation, knows about and may work with permissions, user priveleges, av solutions | can easily work with hardware firewall and OS built-in firewall, can securely configure a system Implement least needed priviligies security policy | ccie security strong pentest skills able to audit the company it systems security by himself | ||||||||||||||||||||
13 | System Administration | |||||||||||||||||||||||||
14 | 11 | System Configuration Control | Knowledge of existance of config files as a basis of the any system | Can work with show/display/print commands in any system or at least find the general config file | Strong knowledge of git | Centralized configuration management using tools like chef, puppet | ||||||||||||||||||||
15 | 12 | Linux | Knows what is Linux | Knows how to navigate the file system,reinstall/install, knows commands:ip route, tcpdump, traceroute | Strong administration and troubleshooting skills on one of Enterprise Linux distros (CentOS based, Debian based, SUSE) Certification preferred. | Deep knowledge : Kernel, Opeshift, API Management, Ansible. Red Hat Certified Architect | ||||||||||||||||||||
16 | 13 | Windows | Knows and able to operate in Computer Management menu, Network Settings | Knows how to reinstall/install Windows , knows basic windows commands:cmd,control,msconfig,regedit | Can troubleshoot problems,knows how to configure and administer Windows Server | Expert knowledge windows/windows server, setings and control AD,DNS,DHCP, Powershell, SCCM, Technical support, work with TAC, WSUS deplayment. | ||||||||||||||||||||
17 | 14 | OS installation automation | Can setup os by himself | Is able to create unattended install image | Uses automated installation over network | All OS images are configured via configuration management tools and deployed automatically | ||||||||||||||||||||
18 | 15 | Monitoring | Basic understanding of usage of monitoring systems | Basic knowledge of monitoring tools (Solarwind, Zabbix, PRTG,Splunk) | Easily use those tools like htop,top, tail, findstr, grep e t c. easily can find and work with system logs | Strong knowledge of logging servers, able to write queries to db, software, OSs with specific keys, can write scrips to parse logs | ||||||||||||||||||||
19 | 16 | Organization of config files | Knows how to organize their desktop. | Follows configuration files logical grouping in the file system. Names folders by company name, then subfolders for different versions of configuration if there are some extra files | L0+L1+ Big configuration files are split in several small using includes. Backups config files. | Backuping config files is automated. Every configuration file has a summary, is well commented, consistent white space usage. The file should look beautiful. | ||||||||||||||||||||
20 | 17 | Services data organization | Basic understanding of this process. | Understands how to organize services. Usually has one directory per service | Better at organizing services. Generally has one partition per service | The best at the organizing, has one partition per service, all names are consistent between all servers | ||||||||||||||||||||
21 | 18 | Configuration files readability | Can't read config files. | Knows how to read config files. Uses google when they're faced with unknown configs. | Has experience with many config files from different systems. Knows how to read and write them on their own. | Same as Pro + Uses best-practices from developers documentations to edit config files. | ||||||||||||||||||||
22 | 19 | Databases | Thinks that Excel is a database and is on the way to explore the db world | Understands the concept of DB and knows how to use DBMS (Oracle, MSSQL etc) and write simple search like select. | Knows how to do basic database administration, performance optimization, index optimization, write advanced select queries, able to replace cursor usage with relational sql, understands how data is stored internally, understands how indexes are stored internally, understands how databases can be mirrored, replicated etc. Understands how the two phase commit works. | Good understanding of database administration, is able to design and implement geographically distributed highly available redundant data base system | ||||||||||||||||||||
23 | 20 | Scripts | Know how to run scripts but can't read them. | Can read scripts and write simple ps,bash,batch,python e t c scripts. | Can read and write optimized multiple scripts with different languages like: Python, Pearl, C++, Ruby, Powershell | Writes great scripts which is then published on GitHub and used by IT community | ||||||||||||||||||||
24 | Network technologies | |||||||||||||||||||||||||
25 | 21 | Network configuration skills | Knows:What an IP-address,subnet mask ,use ping,tracert | Basic to mediocre networking understanding, CCNA . Knows: What is OSI-model What is MAC-address What is a switch, how it differs from a hub What is DNS What is DHCP | Good networking understanding, CCNP. Knows: OSI model What OSI level means in network gear specifiations What is classless networking TCP/IP stack, which headers are add on which level VPN and VLANs and how to use them Wireless networking and how to use it and secure it | Expert networking understating, CCIE Is able to design and implement geographically distributed highly-loaded network with thousands of users. Is and expert is one or several of the following areas: | ||||||||||||||||||||
26 | 22 | Network configuration skills | Basic understanding of virtualization and cloud concepts | Able to work in Virtualbox or VMWare workstation | Good virtualization uderstanding Knows: Theory, how virtualization works What difference there is between full virtualization and paravirtualization What binary translation is What Ring -1 is What AMV-V/Intel-VT is What SR-IOV is What live-migration is What storage system to use and why partitin aligment in virtualization is especially important Is able to: Use virtualization in production using Citrix XEN server, KVM, VMware ESXi, etc. Migrate physical servers to virtual machines and vice versa | Expert virtualization understanding Has expert-level understing of virtualization system of choice. Is able to design and implement higly-avaliable, georaphically distributed cloud solutions | ||||||||||||||||||||
27 | 23 | Knowledges of Network Simulators and Emulators | Basic operation skills in Packet Tracer | Able to manage firmwares of emulated machines, basic trouleshooting skills for Emulators | Able to create labs and calculate required hardware resources | Able to create maximum approximate conditions with real topology | ||||||||||||||||||||
28 | 24 | Understanding how Firewall works | Basic understanding of firewall applications in enterprise networks | Able to setup basic network settings | Understand and implement firewalls by best practices, have strong troubleshooting skills, deep knowledge of all configuration capabilities of firewall of one any vendor. | Know packets dataflow, have deep knowledges about hardware and software working, Have deep understanding about principles work process of firewall and know large amount of differences between vendors | ||||||||||||||||||||
29 | 25 | Understanding how Router works | Basic understanding of routing concepts | Able to manage traffic by routing protocols and static routes, know differences between static and dynamic routing | Able to consult customers about all types of routers,can troubleshoot SOHO and Medium Enterprise Networks | Able to implement and troubleshoot geografically distributed enterprise networks, have hardware tshooting skills | ||||||||||||||||||||
30 | 26 | Understanding how Switch works | Able to differentiate switch and hub, understand switching concept | Basic switch configation skills: vlan, stp | CCNP Switch: loop prevention and troubleshooting, stormcontrol, dhcp snooping | Able to configure and troubleshoot switches from different vendor (with close eyes, without touching, only with power of minds) | ||||||||||||||||||||
31 | 27 | Understanding how Proxy works | Basic understanding of proxy concept | Able to manage users and their policies in proxy server | Able to implement implicit and explicit proxy servers without any interuptions to IT infrastructure of customers | Advanced troubleshooting skills, experience of working with different types of proxy and different vendors | ||||||||||||||||||||
32 | 28 | Understanding how MDM / EMM works | Able to explain why protection/control of mobile devices is important in enterprise environment | Basic manipulation skills of MDM application | Able implement MDM/EMM system to customer site/ Tshoot and follow best practices | Deep troubleshooting of MDM/EMM solutions. Good knowledges of API,Integration Third party systems | ||||||||||||||||||||
33 | 29 | NAC | Able to explain why access to the network needs to be managed | Able to deploy NAC system and present to others all required components and explain concept | Able to deploy 802.1x MAB Guest access WebAuth VPN AAA clustering/deployment. Tshoot Tacacs+ Radius EAP e t c | Deep troubleshooting of NAC solutions. Good knowledges of API,Integration Third party systems | ||||||||||||||||||||
34 | 30 | WAF | Have basic knowledges of WEB attacks and WAF applications | Knows all types of implementation of WAF | Able to configure deep customized security profiles and HA. Know architecture of WEB traffic data and XML | Deep troubleshooting of WAF solutions. Good knowledges of API,Integration Third party systems | ||||||||||||||||||||
35 | 31 | Network security | Able to explain part of concepts of network security | Able to simulate network attacks of all network levels | Knows all actual network attacks and all mitigation methods and able to implement those solutions | Can define threats of network, carry out audit, uses best practices to close this breaches | ||||||||||||||||||||
36 | 32 | Network Design | Basic understanding of network design concepts | Can draw simple network design with few mistakes which can be fixed quickly | Can create architecture for new or for modernization of existing network. Implemetation without any interaptions | Create concepts of geographically distributed modern enterprise network designs. Have all required arguments for all decitions | ||||||||||||||||||||
37 | 33 | Troubleshooting of network | Has a logical explanation for simple network problems | Can use basic instruments for tshoot | Correct work with TAC and explanation of troubles, Searching community, Never give up with indeterministic behaviors of troubles | Guru of tshoot | ||||||||||||||||||||
38 | 34 | Documenting networks | Can fix all caried out actions to notes | Know how to draw network diagram l2 and l3, create ip plan and can implement IPAM systems | Can track all changes of network design or configuration with fixing in understandable form of document | Have all metodology and best practices of improving documenting. | ||||||||||||||||||||
39 | IS for Splunk Engineers | |||||||||||||||||||||||||
40 | 35 | Threat Intelligence - Core Skills - SIEM Specialist - Malware Analyst - Theat Intel Data Scientist | Can work with logs and have basic knowledges of SIEM features | Work with TI systems and can explain IOC concepts | Security researcher skills, can work with TI and Security systems integration. excellent SIEM knowledges, can test Malwares with isolated systems and implement mitigation procedures | TOP IT security specialist. Information security architect | ||||||||||||||||||||
41 | 36 | SOC monitoring analyst SOC content developer | Can answer to question: What is SOC? | Knows basic principals of working with Security Devices/Tools | Can create SOC metodology. can define SOC roles resposobility areas. Escalation of incident ways | Build SOC for any organization. Excellent knowledges of Management SOC | ||||||||||||||||||||
42 | 37 | Red Team Member - Physical Access Specialist - Threat Simulation Specialist - Ethical hacking | Can answer to question: What is red team? | Basic knowledges of tips to Physical Access and explain actual threat of IS wholes | Periodicly participate on Ethical hacking platforms with practice. Practice theoratical knowledges. Excecllent understanding Red teaming concepts | Can comprimise any system with 80% result | ||||||||||||||||||||
43 | 38 | User Awareness Trainer Developer Awareness Trainer | Can explain basic knowledge of IT security risks | Follows basic user awareness security rules | Can create user awareness security checklist for company | Can develop new user awareness rules/standards and teach employes/ make presentation | ||||||||||||||||||||
44 | 39 | Compliiance\Metodology - GDPR Specialist - ISO27001 Specialist/Assessor - PCI DSS Specialist/QSA | Can answer to question: What is IT security standards? | Familiar with the company IT security standards. Familiar with Kazakhstan IT security standards | Have at least one of the compliance/methodology certificate and related knowledges | Can write standart/methodology for any type of company | ||||||||||||||||||||
45 | 40 | Cryptography | Can answer to question: What is encryption | Can implement encryption of channels or data on network devices | Deep understanding of data encryption and decryption methods and able to differentiate them in firewall settings | Superman of cryptography. Can practice all theoretical knowledges | ||||||||||||||||||||
46 | Experiense | |||||||||||||||||||||||||
47 | 41 | Products/Vendors our company works with | Can name all the main Vendors our company works with | Can name all the products of our Vendors. And knows how to implement and set up/tune one of the product | Specialized with products of 1 Vendor. Can implement and tshoot most of the products of one Vendor. Familiar with how products of other vendors work | Confident when working with all the products of one vendor. | ||||||||||||||||||||
48 | 42 | Years of professional experience | 0 | 1 year | 2 years | 5 years | ||||||||||||||||||||
49 | 43 | Presentation making/Speaker skills | Can make somewhat informative ppt presentation and explain the topic | Can make structured, minimalist and informative presentation. As a speaker can hold audience's attention. | As a speaker uses all the main presenter/speaker skills. Can easily deliver needed information to listeners | Can make speaking presentation on any related topic without preparation | ||||||||||||||||||||
50 | 44 | Ability to read manuals | Tries first then reads documentations. | Reads documentations and uses it in their practice. | Due to having experience at the field starts practicing first and if they're having some issues tries to google. | Has the ability to read manuals from applications source code. | ||||||||||||||||||||
51 | 45 | Specifications and Estimates | Does everything according to specification | Come up with questions regarding missed cases in the spec | Understand complete picture and come up with entire areas that need to be specificated | Able to suggest better alternatives and flows to given requirements based on experience | ||||||||||||||||||||
52 | 46 | English | Beginner | Elementary | Intermediate | Advanced | ||||||||||||||||||||
53 | Knowledge | |||||||||||||||||||||||||
54 | 47 | Certification | CCNA or NSE4 or Splunk user knowledge | CCNA, NSE4 or Splunk pro user valid certification | CCNP or NSE5 or NSE6 or NSE7 or Splunk Architect or Splunk Admin | Splunk Consultant or CCIE or NSE8 | ||||||||||||||||||||
55 | 48 | Blogs | Reads and watches habr, Youtube | Social networks and channel | Community (create and answer to questions) | Moderate own channel or any technical blog platforms | ||||||||||||||||||||
56 | 49 | Teaching skills | Can not teach | Assistant of speaker | Speaker | Speaker for Professionals and other experts | ||||||||||||||||||||
57 | ||||||||||||||||||||||||||
58 | ||||||||||||||||||||||||||
59 | ||||||||||||||||||||||||||
60 | ||||||||||||||||||||||||||
61 | ||||||||||||||||||||||||||
62 | ||||||||||||||||||||||||||
63 | ||||||||||||||||||||||||||
64 | ||||||||||||||||||||||||||
65 | ||||||||||||||||||||||||||
66 | ||||||||||||||||||||||||||
67 | ||||||||||||||||||||||||||
68 | ||||||||||||||||||||||||||
69 | ||||||||||||||||||||||||||
70 | ||||||||||||||||||||||||||
71 | ||||||||||||||||||||||||||
72 | ||||||||||||||||||||||||||
73 | ||||||||||||||||||||||||||
74 | ||||||||||||||||||||||||||
75 | ||||||||||||||||||||||||||
76 | ||||||||||||||||||||||||||
77 | ||||||||||||||||||||||||||
78 | ||||||||||||||||||||||||||
79 | ||||||||||||||||||||||||||
80 | ||||||||||||||||||||||||||
81 | ||||||||||||||||||||||||||
82 | ||||||||||||||||||||||||||
83 | ||||||||||||||||||||||||||
84 | ||||||||||||||||||||||||||
85 | ||||||||||||||||||||||||||
86 | ||||||||||||||||||||||||||
87 | ||||||||||||||||||||||||||
88 | ||||||||||||||||||||||||||
89 | ||||||||||||||||||||||||||
90 | ||||||||||||||||||||||||||
91 | ||||||||||||||||||||||||||
92 | ||||||||||||||||||||||||||
93 | ||||||||||||||||||||||||||
94 | ||||||||||||||||||||||||||
95 | ||||||||||||||||||||||||||
96 | ||||||||||||||||||||||||||
97 | ||||||||||||||||||||||||||
98 | ||||||||||||||||||||||||||
99 | ||||||||||||||||||||||||||
100 | ||||||||||||||||||||||||||