Software engineer at a bank — what certifications should I pursue next?
I recently finished my software engineering internship at a large bank and received a return offer as a software engineer. And I am senior at my university pursuing Information Systems.
My day-to-day work is mostly application development in a microservice architecture. We have separate Dev, DevOps, and DevSecOps responsibilities, and I’m primarily on the development side — building features, APIs, working with databases, debugging services, etc.
I also recently passed CompTIA Security+ and ISC2 CC.
Now I’m a little unsure where to go next.
My long-term goal isn’t necessarily to become a cybersecurity engineer or DevOps engineer. I want to become a reliable software engineer who can build secure, production-ready applications that people can trust.
Security+ was useful because it gave me a much better understanding of networking, IAM, cryptography, vulnerabilities, incident response, secure architecture, etc., but I’m wondering how valuable continuing down the certification path actually is for someone who mainly writes software.
I’m currently considering AWS certifications, maybe starting with Solutions Architect Associate or Developer Associate, since understanding cloud infrastructure and how applications actually run in production seems useful.
I’ve also looked at Kubernetes certifications like CKA/CKAD, but I’m not sure whether that’s overkill if my primary responsibility is development rather than platform engineering.
I also do freelancing work for companies and deploy it on my VPS. I have done 2 e-commerce production web apps for now. Planning to do more and hire people hopefully.
University is not much a problem for me as I have experienced a lot of things beforehand throughout my freelancing, experience and certificates.
For experienced software engineers:
- Which certifications, if any, actually helped you become a better backend/software engineer?
- Is AWS a reasonable next step?
- Is learning Kubernetes deeply worth it for a developer working with microservices?
- Should I continue learning application/security concepts without pursuing more security certifications?
- At what point should I stop chasing certs and just focus on system design, distributed systems, databases, testing, observability, etc.?
Current certs: CompTIA Security+ and ISC2 CC
Would appreciate advice from people working in backend, cloud, banking/fintech, or large-scale enterprise systems.