Become a hybrid cloud expert!
Duration: 7 months, including 60 days of classes and 80 days of on the job training.
Start date: 14.12.2021
Application period: 13.10-29.11.2021
Address: Linnoitustie 3, 02600 Espoo, 4. krs
Note: the contact teaching period will be taught either in the classroom or online depending on the current situation.
Description of the training
Practical training module of Cloud Experts that aims for employment is executed as project based learning. The training gives a solid base for understanding how cloud services are utilized in implementation of services. The training is divided into three core themes: Azure, AWS and Google Cloud. Additionally, the themes of cyber security and DevOps will be touched upon.
During the training you have the possibility to accomplish up to 2 well-recognized certificates according to your choice (Azure, AWS or Google Cloud).
A comprehensive 60-day intensive training module gives a robust base on having the skillset required in recruitment for the partner companies. You will get up-to-date knowledge on the current and most common cloud services utilized as a part of the companies’ server architecture.
The aim of this training module is to give up-to-date knowledge and skills for trainees who already have experience in cloud services. Additionally, we aim for helping recent graduates to start their career within their own field. After the training, you have a solid set of skills required in working as a cloud service expert.
Teaching is in Finnish and the teaching materials are in English.
The target audience
The target audience for this training module are customers of TE Services who want to work in the industry while having the motivation to update or develop their pre-existing skills in cloud services. A formal training and / or previous experience in system maintenance and management is considered as an asset.
Successful applicants showcase a strong desire towards developing their skills and knowledge. The partner companies are looking for candidates who see themselves as cloud service experts in the near future.
The partner companies value knowledge gained through trainees’ own projects and hobbies in addition to formal education and work experience. Do not hesitate to apply!
Content of the training
The training is divided into three core themes: Azure, AWS and Google Cloud. Each theme is learned from the basics.
Additionally, we provide modules on cyber security and DevOps.
1. Module: Azure
This part discusses the basic elements of cloud services, such as virtual machines, drives and networks and various methods of storing. A crucial part of Azure cloud fundamentals is the identity and access management. We learn how to publish software on Azure App Services and how SQL databases are implemented as a service. The trainees will learn the basics through practical examples and tasks in real settings.
This part of the training starts with the configuration and set up of SQL and NoSQL (MongoDB) databases while also looking into the tools of database management and their usage especially in Microsoft SQL Server. Furthermore, we plan and create SQL server databases and add tables applying business logic by using stored procedures, triggers, user functions and screens.
This part consists of understanding the possibilities of the safety features provided by Azure and its core tool Azure Security Center. Additionally, we go through identity management, threat minimization and responding as well as general cyber security practices. We also go through Azure Sentinel, which is a new AI-based SIEM (Security Incident and Event Management) implementation targeting centralized management of cyber security.
M365 is a SaaS by Azure, thus it intertwines seamlessly with the training materials in this module. The topic is approached from an admin's point of view, thus we mainly focus on services such as Exchange and SharePoint and their management. Other services include teamwork services such as Teams and OneDrive since these kinds of services require precisely defined security features. Practical exercises deepen the knowledge of M365 package features and applications.
The possibilities of IoT Device data gathering, post-processing and utilization provided by Azure. We study IoT solutions from two perspectives: Azure IoT Central (SaaS) and Azure IoT Hub concept. The latter requires more configuration but offers more possibilities.
2. Module: AWS
Deployment of AWS services. Introduction to AWS Server Migration and AWS Database Migration Services. We practice the payload transfer from customer’s own servers to AWS cloud services and look into AWS Snowball & AWS Snowmobile services meant for massive data transfer.
We go through all the necessary basics of setup, maintenance and change management of virtual machines in AWS service. Additionally, we look into EC2-, EC2 Autoscaling, Lightsail- and Elastic Beanstalk services that are utilized in building a fault tolerant and scaling cloud infrastructure for business usage.
In traditional data centers extra computing power and storage capacity has to be provisioned to handle load spikes. Therefore, most of the time the expensive resources remain unused. The elasticity provided by AWS Cloud Service file systems, such as Amazon Simple Storage Service (S3) and Glacier, Elastic File System (EFS) as well as Relational Database Service (RDS) and SimpleDB allows cost-effective, scalable simultaneous transactions.
AWS Workspaces is a Windows 10 based workstation that is utilized whenever required and the costs only come down to the usage of the workspace. We practice creating the virtual workstation infrastructure for businesses and how to use the workstation on Chrome and Firefox browsers. This way, businesses can cut their IT-related costs while standardizing the workstation infrastructure.
A crucial part of the AWS Cloud services’ cyber security is the identity access management (IAM). We will deploy user specified accounts and permissions (IAM) that allow us to learn about limiting the usage based, for instance, on service or identifier. We also practice the activation of two-factor authentication while also learning how to manage confirmations, recovery and filing in AWS cloud. During this module, you will also learn how to manage SSL certificates, auditing (CloudWatch), and the usage of Cloud Single Sign-on. In addition, we look into how Amazon Macie can be utilized in automatic classification and protection of data stored in AWS.
AWS services include CloudFormation, Lambda, OpsWorks, Elastic BeanStalk, Amazon Elastic Container Service and CodeDeploy that support DevOps practices. All of them provide ultra modern, interlinked solutions to the organizations’ needs of software development.
3. Module: Google Cloud
In this module, we introduce ourselves to the usage, features and services of Google Cloud Platform. Google Cloud provides crisp solutions to complex needs regarding storage space, analytics, Big Data, machine learning and app development.
The introduction to Google Cloud starts with learning how to create projects in Google Cloud Platform (GCP) and defining internal IAM-roles within the project according to best practices. GCP subscription and billing is splitted between imaginary organization units. Additionally, the reporting and alerts for billing are created for the organization. We also look into Command Line Tools (CLI) and Cloud SDK tools.
Important presales and architecture tasks. Implementing and documenting an architecture plan in GCP and evaluating the budget of GCP services. Learning how to utilize the computing capacity services applicable to the plan (Compute Engine, Google Kubernetes Engine, App Engine, Cloud Run ja Cloud Functions). Learning how to select Infrastructure as a Service (IaaS) for the intended use and how to connect it to Platform as a Service (PaaS), such as Cloud SQL, BigQuery, Cloud Spanner, Cloud Bigtable, Nearline, Coldline and Archive, that are suitable for organizational needs in a cost effective manner. Practising the documentation of Google Cloud services.
Deploying Google Engine resources and executing following tasks: instance deployment through Cloud Console ja Cloud SDK. Determining suitable disks, usability settings and SSH keys for Compute Engine resources. Creating automatically scalable Google Compute Engine instance groups by utilizing instance template settings.
Introduction to network management in Google Cloud:
- Deploying various network resources such as Virtual Private Cloud (VPC) with its subnets (custom-mode VPC and shared VPC).
- Learning how to define private and public IP address settings and use network tags for virtual machines in Google Cloud.
- Limiting network traffic inwards and outwards.
- Establishing VPN connections via Google Cloud, allowing network connection to access server resources with IP addresses of intranet.
- Planning and practising the configuration of network services such as firewall rules, load balancing and high availability services as well as the configuration of Cloud DNS Service.
- Testing load balancing in the application with various load balancing and Proxy services (Global HTTP(S) load balancer, Global SSL Proxy load balancer, Global TCP Proxy load balancer, regional network load balancer and regional internal load balancer).
Deploying Cloud SQL and Cloud Datastore databases. Understanding how to manage large quantities of data in various ways in Google Cloud, such as Cloud Datastore, BigQuery, Cloud Spanner, Cloud Pub/Sub, Cloud Bigtable, Cloud Dataproc, Cloud Dataflow and Cloud Storage. Uploading data to Google Cloud manually and automatically (command line upload, API transfer, import/export, load data from Cloud Storage, streaming data to Cloud Pub/Sub).
Introducing ourselves to Google Kubernetes Engine by creating a Google Kubernetes Engine cluster and container application. Delving into the monitoring and management on the container level. Deploying important services for DevOps developers such as App Engine, Cloud Run and Cloud Function. Familiarizing ourselves with the version control and scalability of the project. Creating an application that receives information from Google Cloud events service. Utilizing Cloud Marketplace catalogue in deployment of new services, installing resources based on Marketplace template and connecting other Google Cloud services to 3rd party services found in Marketplace.
On the Job training
The skills learned during the contact training are put to the test during the practical training.
The trainee can contact the teachers for support during the practical training.
Interested? Send your question about the training to: