Cross-domain specializations
Extend either career track into non-human and AI agent identity.
These S01/S02 and AG outcome codes are retained from v0.3 as optional practice prompts. The authoritative v0.4 framework organizes these topics within D09, D10 and D12.
S01 — Non-Human Identity Engineering
Classify human and non-human identities; explain service and database authentication; design credential lifecycle and secrets management; evaluate static credentials, certificates, managed identities and short-lived credentials; govern least-privilege NHI access.
Start with an engineering question
S02 — AI Agent Identity & Access Engineering
AG01 Identity models · AG02 Authentication · AG03 Delegated authorization · AG04 MCP tool and resource access · AG05 Lifecycle governance · AG06 Platform design, monitoring and security.
Start with an engineering question
Practical evidence
Produce an identity inventory, a trust model, a least-privilege policy and a tested allowed/denied request. For agents, include the human delegator, agent workload, target tool and approval boundary.