What's on the shelf, and what isn't.

Design secure, resilient, high-performing and cost-optimised architectures on AWS: identity, accounts, networking, compute, storage, databases, serverless, containers, integration, security and cost, ending with architecture patterns.

Set up, deploy, operate and secure solutions on Google Cloud: organisation and IAM, billing, networking, Compute Engine, GKE, serverless, storage, databases, analytics, monitoring and infrastructure as code.

From setup and the core language to functional and object-oriented Python, type hints, packaging, async and concurrency, testing, NumPy and pandas basics, Pydantic, FastAPI, databases and deployment.

From the language core, functions, objects and the event loop to the web platform, tooling, TypeScript, Node.js, React, testing, Next.js, databases, NestJS and deployment. Includes a bridge for people coming from Python.

Algorithmic efficiency, linear structures, recursion, searching and sorting, trees and heaps, graphs, and techniques such as backtracking and dynamic programming.

Structured after the databases courses at Carnegie Mellon and MIT, and taught through the PostgreSQL and MongoDB documentation: SQL and the MongoDB query language, schema design, indexes, query planning, transactions and isolation, backup and recovery, running PostgreSQL from applications, replication, change data capture, sharding, and when to choose which.

Structured after MIT's operating systems course and taught through the xv6 book, Linux man pages and kernel documentation: processes and system calls, scheduling, address spaces and paging, threads, locks and deadlock, event-driven I/O, storage, file systems and crash recovery, and virtual machines and containers.

Structured after MIT's computer systems networking unit and taught through the open book Computer Networks: A Systems Approach, IETF RFCs and Linux documentation: links and switching, IP and addressing, routing and BGP, UDP, TCP and congestion control, DNS, HTTP and QUIC, TLS, CDNs and load balancing, and data-centre and cloud networking.

Structured after MIT's distributed systems course (6.5840) and its reading list, taught through the course's lecture notes, project documentation and engineering write-ups: RPC, MapReduce, distributed storage, time and ordering, replication, Paxos and Raft, consistency models, coordination services, distributed transactions and global-scale databases and caches.

Structured after MIT's computation structures course, with Carnegie Mellon's introduction to computer systems as a scope check, and taught through the open book Dive into Systems: bits, integers and floating point, C for systems work, logic to a processor, x86-64 assembly, memory safety, pipelining, caches, linking, optimisation and profiling, and multicore.

Defensive security for the people who build and run software, structured after MIT's computer security courses and taught through OWASP, NIST, the IETF and MIT course notes: threat modelling, cryptography basics, TLS and PKI, passwords, sessions, OAuth and OpenID Connect, access control, web vulnerabilities, secure APIs, supply chain, secrets, cloud and containers, detection and incident response, and privacy.

The craft of building software with a team, structured after MIT's software construction and design courses and Carnegie Mellon's foundations of software engineering, and taught through Software Engineering at Google and Google's SRE books: specifications and design docs, testing, code review, version control, builds and dependencies, CI and delivery, architecture, reliability, and large-scale change.

The Windows estate large companies run, organised by Microsoft's Windows Server hybrid administrator exam outline (AZ-802) and taught through Microsoft Learn: Windows Server administration, Active Directory and Group Policy, DNS and DHCP, file services, Hyper-V, failover clustering, securing AD, certificate services, hybrid management with Azure, troubleshooting, and Exchange and email authentication.

Running Linux servers the enterprise way, organised by Red Hat's RHCSA objectives (RHEL 10) and taught through Red Hat and upstream documentation: the shell and permissions, services and the journal, software and repositories, partitions, LVM and XFS, NetworkManager, firewalld, SSH, SELinux, joining Active Directory, and automation and patching with Ansible.

On-premises compute as large companies run it: the data centre, server hardware and out-of-band management, VMware vSphere (ESX, vCenter, vMotion, DRS, HA), vSphere networking and vSAN, VMware Cloud Foundation, and Nutanix AOS and AHV and Proxmox VE as the main alternatives, from Broadcom, Nutanix and Proxmox documentation.

Keeping data safe and recoverable: block, file and object storage, SANs, Fibre Channel and iSCSI, NetApp ONTAP (HA pairs, SVMs, snapshots, SnapMirror, ransomware protection), backup with Veeam (3-2-1, immutability, application-aware backups, restore testing) and disaster recovery (RPO and RTO, DR patterns, replication, ransomware recovery).

Workforce identity as large companies run it: directories and Kerberos, SAML, OAuth 2.0, OpenID Connect and SCIM, Microsoft Entra ID (hybrid sign-in, single sign-on, Conditional Access, MFA), Okta, identity governance (joiner, mover, leaver, access reviews) and privileged access management with Entra PIM and Idira (formerly CyberArk).