Study Path
This page maps the notes in this repository to the most common Software Engineer roles. For each role it points to the chapters and subchapters that matter most, so you can skip what is irrelevant and go deep where it counts.
Index
- 1. How to Use This Path
- 2. Common Core (Every Software Engineer)
- 3. Backend Engineer
- 4. Frontend Engineer
- 5. Full-Stack Engineer
- 6. DevOps and Platform Engineer
- 7. Site Reliability Engineer (SRE)
- 8. Cloud Engineer (Azure)
- 9. Data Engineer
- 10. Data Scientist
- 11. Machine Learning and AI Engineer
- 12. Security Engineer
- 13. Systems and Embedded Engineer
- 14. Network Engineer
- 15. Database Engineer
- 16. FinTech Engineer (Banking and Treasury)
- 17. Technical Interview Track
- 18. Notes-to-Roles Matrix
1. How to Use This Path
- Start with the Common Core. Every role below assumes it.
- Pick your role and work through its sections in order:
| Tier | Meaning | When to study it |
|---|---|---|
| Core | Day-to-day knowledge for the role; interviews test it directly | First, in the order listed |
| Recommended | Separates a solid engineer from a beginner in the role | After the Core feels comfortable |
| Deep Dive | Specialist or senior-level material | When the job or your curiosity calls for it |
- Use the checkpoint at the end of each role to check yourself. If you can't answer a question, go back to the linked subchapter.
- A link to a whole chapter (for example
8. Distributed Systems Theory) means read all of it. A link to a subchapter (for example8.2 Consistency Models) means that part is enough. - Every subchapter ends with a Practice block. Do the exercises; reading alone does not stick.
2. Common Core (Every Software Engineer)
The shared base for every role: how a computer runs your code, how machines talk to each other, how data is stored, and how to reason about algorithms.
Core
- Algorithms and Data Structures
- 0. Interview Foundations, 1. Array and Hashing, 2. Two Pointer, 4. Binary Search: complexity analysis and the most frequent patterns
- 6. Linked List, 7. Trees, 10. Heap or Priority Queue: linked structures, trees and heaps
- 14. Advanced Graphs, 11. 1D Dynamic Programming: graphs and an introduction to dynamic programming
- Discrete Mathematics
- 1.4 Proof Techniques, 3.2 Mathematical Induction: proving that code is correct (invariants, induction)
- 5.1 Counting Principles, 5.2 Permutations and Combinations: counting, the base of complexity estimates
- 8.1 Graph Fundamentals, 8.4 Traversals and Paths, 9.1 Tree Fundamentals: graphs and trees, which appear everywhere
- 10. Algorithms and Complexity: Big-O, growth of functions, complexity analysis
- Operative Systems
- 2.1 Process Concept, 2.3 Interprocess Communication: processes and IPC
- 3.1 Thread Fundamentals: threads
- 5.1 The Critical Section Problem, 5.3 Synchronization Primitives, 6.1 Deadlock Characterization: race conditions, locks and deadlocks
- 7.3 Paging, 8.1 Demand Paging, 8.2 Page Replacement: paging and virtual memory
- Networking
- 2.3 The TCP/IP Model: the TCP/IP stack
- 5.2 IPv4 Addressing: IP addressing and subnets
- 7.3 TCP Mechanics: how TCP works (handshake, retransmission)
- 8.2 Naming and the Domain Name System, 8.3 The Web and HTTP: DNS and HTTP, which every engineer debugs
- Database Systems in Postgres
- 2.3 Normalization: normalization
- 4.3 Joining Tables, 4.4 Aggregation and Grouping: joins and aggregation
- 6.2 Index Structures: how indexes work (B-tree, hash)
- 8.1 Transaction Basics, 8.2 Isolation Levels: ACID transactions and isolation levels
Recommended
- System Design: 1.2 Core Quality Attributes, 1.4 Design Process and Trade-offs: the vocabulary of trade-offs (latency, throughput, availability)
- Cyber Security: 1.1 Core Security Principles, 3.1 Cryptographic Fundamentals: CIA triad, least privilege, basic cryptography
- Docker: 1.1 Introduction to Containers, 5.1 Dockerfile Basics: what a container is and how to write a Dockerfile
- GitLab CI/CD: 1.1 CI/CD Core Concepts: what CI/CD is and why it matters
Pick One Language and Go Deep
Checkpoint
- Can you state the time and space complexity of your own solution without being asked?
- What happens, from DNS lookup to rendered response, when you type a URL into a browser?
- Why can two threads incrementing the same counter lose updates, and how do you fix it?
- What anomaly does
READ COMMITTEDallow thatSERIALIZABLEprevents?
3. Backend Engineer
Builds the services, APIs and data layers behind applications. The job comes down to correctness under concurrency, good API contracts and data that stays consistent.
Core
- Language and framework (pick one stack)
- Java: 12. Concurrency & Parallelism, 16. Database Connectivity with JDBC, 17. The Spring Framework, 18. Spring Boot and Production Applications
- Node.js: 11. Node.js Server-Side JavaScript Runtime, 12. Middleware and Server Frameworks with Express, 13. Storage and Data Persistence
- Rust: 10. Concurrency and Parallelism, 11. Asynchronous Rust, 16.4 Networking and Web
- System Design
- 3. APIs and Service Interfaces: API design, REST vs gRPC vs GraphQL, versioning, gateways
- 4.2 Relational Databases, 4.3 NoSQL and Specialized Stores: choosing between SQL and NoSQL
- 5.1 Caching Fundamentals, 5.2 Caching Strategies: caching (cache-aside, write-through, invalidation)
- 6.3 Traffic Control: rate limiting and backpressure
- 7.1 Message Queues, 7.3 Delivery Semantics: queues and at-least-once / exactly-once semantics
- 9.2 Resilience Patterns: timeouts, retries, circuit breakers, idempotency
- Database Systems in Postgres
- 4. SQL Querying Fundamentals: all of SQL querying
- 5.1 Common Table Expressions, 5.2 Window Functions: CTEs and window functions
- 6.3 Index Design and Usage, 7.3 Reading Execution Plans, 7.4 Performance Tuning: choosing indexes and reading
EXPLAIN - 8.3 Multiversion Concurrency Control, 8.4 Locking: MVCC and locking, the source of most production surprises
- Web Technologies
- 10.1 The HTTP Protocol, 10.2 Cookies and Sessions, 10.3 Authentication and Authorization, 10.4 REST-Style APIs: HTTP semantics, sessions, auth, REST
Recommended
- System Design: 4.4 Replication, 4.5 Partitioning and Sharding, 8.2 Consistency Models, 8.5 Distributed Transactions, 10.2 Service-Oriented Architectures, 10.3 Event-Driven Architectures, 11.1 Authentication and Authorization, 12.1 Telemetry Pillars
- Object Oriented Programming in Java: 9.2 SOLID Principles, 9.3 Creational Patterns, 9.4 Structural Patterns, 9.5 Behavioral Patterns, 15.1 Testing Object-Oriented Code: SOLID, design patterns, testing
- Cyber Security: 8.2 Web Attacks, 8.3 SQL Injection and Defences, 8.6 API and Mobile Back-End Security: injection and API security
- Networking: 9.1 The Socket API, 9.2 Concurrency Models: sockets and server concurrency models
- Operative Systems: 3.2 Threading Models, 11.2 I/O Software Layers: threading models and how async I/O works underneath
- Docker: 5. Building Images with Dockerfiles, 8. Docker Compose: containerize the service and run it locally with its dependencies
Deep Dive
- 8.4 Consensus and Coordination: Raft, leader election, distributed locks
- 15.4 Transactional and Real-Time Systems: payment, booking and real-time system case studies
- 12. Replication and High Availability: replication and high availability
- 9. Event-Based Solutions, 10. Message-Based Solutions: event and message brokers in practice
Checkpoint
- Design
POST /paymentsso that a client retry never charges twice. - Explain cache-aside and two ways the cache can go stale.
- Read an
EXPLAIN ANALYZEoutput and say why the planner skipped your index.
4. Frontend Engineer
Builds what users see and touch. You need to understand the browser as a runtime, JavaScript's concurrency model, rendering performance and accessibility.
Core
- Web Technologies
- 2. Document Structure and Presentation: HTML, CSS, layout and responsive design
- 3. JavaScript Language Core, 4. Objects, Arrays and Object-Oriented JavaScript: JavaScript fundamentals, prototypes and classes
- 5. Asynchronous Programming in JavaScript: event loop, promises,
async/await,fetch - 6. Browser APIs: DOM, Style and Events: DOM and the event system (bubbling, delegation)
- 9. TypeScript: TypeScript
- React Interview Study Guide
- 1. JavaScript Fundamentals for React: closures and async, which React interviews always probe
- 2. React Core Concepts, 3. React Hooks (Deep Dive): components, state and every core hook
- 4. Rendering & Performance: re-render model, memoization, code splitting
- 5. State Management: Context,
useReducer, Redux Toolkit - 9. Data Fetching & Side Effects: data fetching and TanStack Query
Recommended
- React Interview Study Guide: 6. Routing, 7. Forms & Validation, 10. Testing, 11. TypeScript with React, 12. Architecture & Patterns, 14. Accessibility (a11y)
- Web Technologies: 10.1 The HTTP Protocol, 10.2 Cookies and Sessions, 10.5 Real-Time Communication and WebSocket: HTTP, cookies, WebSocket
- Web Technologies: 17.1 Web Application Security, 17.2 Testing and Code Quality: front-end security and testing
- Cyber Security: 9. Web Security (Client Side): XSS, CSRF, CSP, CORS and same-origin policy
- System Design: 5.4 Content Delivery Networks: CDNs and edge caching
Deep Dive
- 13. Next.js & SSR: SSR, SSG, App Router
- 7. Graphics and Rendering APIs: SVG, Canvas, WebGL for visualizations
- 15.2 Progressive Web Apps: Progressive Web Apps
- 16. Cross-Platform Web-Based Native Applications: Electron desktop apps
- 8. The jQuery Library: jQuery, only if you maintain legacy code
Checkpoint
- In what order do
setTimeout, a resolved promise and synchronous code run? - Why does a component re-render when its props look unchanged, and how do you stop it?
- How does
HttpOnly+SameSiteon a cookie help against XSS and CSRF?
5. Full-Stack Engineer
Ships features end to end. The goal is breadth: enough of each layer to build, deploy and debug a complete product without being blocked.
Core (in order)
- Browser: 2. Document Structure and Presentation, 3. JavaScript Language Core, 5. Asynchronous Programming in JavaScript, 6. Browser APIs: DOM, Style and Events
- UI framework: 2. React Core Concepts, 3. React Hooks (Deep Dive), 5. State Management, 9. Data Fetching & Side Effects
- Server: 10. The HTTP Protocol and Web Communication, 11. Node.js Server-Side JavaScript Runtime, 12. Middleware and Server Frameworks with Express
- Data: 13. Storage and Data Persistence, 2. Relational Design and Data Modeling, 4. SQL Querying Fundamentals, 8.2 Isolation Levels
- Ship it: 5. Building Images with Dockerfiles, 8. Docker Compose, 2. Pipeline Configuration Fundamentals, 12.1 Environments, 17.3 Build, Deployment and Operations
Recommended
- Web Technologies: 9. TypeScript (TypeScript on both sides), 17.1 Web Application Security
- System Design: 3.1 API Design Principles, 3.2 API Styles, 5.2 Caching Strategies, 15.1 Foundational Building Blocks
- Cyber Security: 8.2 Web Attacks, 9.2 Cross-Site Scripting (XSS), 9.3 Cross-Site Request Forgery (CSRF)
- React Interview Study Guide: 4. Rendering & Performance, 10. Testing, 13. Next.js & SSR
Deep Dive
- 3.2 Azure App Service, 3.5 Static Web Apps: hosting web apps on a managed platform
- 12.2 Review Apps: review apps for every merge request
- Then specialize toward Backend or Frontend
Checkpoint
- Build and deploy a CRUD app with authentication, a relational database and a CI pipeline, and explain every layer it touches.
6. DevOps and Platform Engineer
Builds the paved road other engineers ship on: build pipelines, container platforms and infrastructure as code.
Core
- Docker
- 1.2 Linux Foundations of Containers: namespaces, cgroups, union filesystems
- 3. Working with Containers, 4. Docker Images, 5. Building Images with Dockerfiles: containers, images, Dockerfiles, multi-stage builds
- 6. Data Persistence and Storage, 7. Docker Networking: volumes and networking
- 10. Docker Security: security hardening and supply chain
- 13. Docker in Development and CI/CD: Docker in CI/CD
- Kubernetes
- 2. Kubernetes Architecture: control plane, kubelet, reconciliation loop
- 4. Workload Resources, 5. Configuration and Secrets Management: workloads, ConfigMaps, Secrets
- 6. Networking, 7. Storage: Services, Ingress, NetworkPolicy, PersistentVolumes
- 8. Scheduling and Resource Management: requests, limits, scheduling, autoscaling
- 11. Helm and Package Management, 12. CI/CD and GitOps: Helm, Kustomize, GitOps with Argo CD / Flux
- GitLab CI/CD
- 2. Pipeline Configuration Fundamentals, 3. Pipeline Architecture, 4. Job Control and Execution Flow: jobs, stages, DAG, parent-child pipelines,
rules - 5. Variables and Secrets, 6. GitLab Runners: variables, secrets, runners and executors
- 7. Docker and Container Workflows, 8. Artifacts, Caching and Releases: building images, artifacts and caching
- 12. Deployment and Environments: environments and deployment strategies
- 2. Pipeline Configuration Fundamentals, 3. Pipeline Architecture, 4. Job Control and Execution Flow: jobs, stages, DAG, parent-child pipelines,
- Networking: 5.2 IPv4 Addressing, 5.6 Address Translation, 8.2 Naming and the Domain Name System, 14.1 Diagnostic Tools: subnets, NAT, DNS, diagnostic tools
- Operative Systems: 1.5 System Interfaces, 13.3 Containers and Lightweight Isolation: system interfaces and container isolation
Recommended
- Kubernetes: 9. Security, 10. Observability, 16. Cluster Operations and Maintenance
- GitLab CI/CD: 9. Reusable and Modular Configuration, 11. Security and Compliance (DevSecOps), 13. Pipeline Optimization
- Azure Developer: 12. Infrastructure as Code and DevOps: ARM, Bicep, Terraform, pipelines
- Docker: 9. Advanced Builds with BuildKit, 11. Resource Management and Performance, 12. Logging, Monitoring, and Debugging
- Cyber Security: 7.4 Virtualization and Container Security, 10.3 DevSecOps: container security and DevSecOps
- System Design: 12.3 Deployment and Release, 12.4 Infrastructure Management: release strategies, infrastructure management
Deep Dive
- 13. Service Mesh, 14. Extending Kubernetes, 15. Multi-Cluster and Federation, 17.1 eBPF in Kubernetes: service mesh, operators, multi-cluster, eBPF
- 15. Docker Internals and Extensibility: engine internals
- 15. Administration, Automation and Migration: CI/CD governance at scale
- 13.5 Network Automation: network automation
Checkpoint
- Trace a
kubectl applyfrom the API server to a running container. - Why does a pod get
OOMKilled, and how do requests and limits relate to QoS classes? - Design a pipeline that builds once, scans, and promotes the same image through staging to production.
7. Site Reliability Engineer (SRE)
Keeps production fast and available, and treats operations as a software problem: SLOs, observability, capacity planning and incident response.
Core
- System Design
- 9. Reliability, Availability, and Fault Tolerance: availability engineering, resilience patterns, failure modes, reliability practice
- 12. Observability and Operations: telemetry, alerting, deployment, infrastructure
- 6.1 Scaling Approaches, 6.2 Load Balancing, 6.3 Traffic Control: scaling, load balancing, traffic control
- 13.1 Performance Analysis, 13.3 Benchmarking and Testing: performance analysis and load testing
- Operative Systems: 4. CPU Scheduling, 8.4 Performance Concerns, 15.2 Performance Analysis: scheduling, thrashing, performance analysis
- Networking: 7.5 Congestion Control, 14. Network Operations, Analysis, and Troubleshooting: congestion control and systematic troubleshooting
- Kubernetes: 8.5 Autoscaling, 10. Observability, 16.4 Troubleshooting: autoscaling, observability, troubleshooting
- Database Systems in Postgres: 7.5 Monitoring and Diagnostics, 11.3 Backup and Recovery, 12.3 High Availability Architecture: database monitoring, backup and HA
Recommended
- System Design: 8.1 Fundamental Constraints, 8.4 Consensus and Coordination: CAP/PACELC, consensus
- Cyber Security: 13.3 Incident Response, 13.5 Resilience and Continuity: incident response, resilience and continuity
- Kubernetes: 16.2 Backup and Disaster Recovery: backup and disaster recovery
- Azure Developer: 11. Monitoring, Troubleshooting, and Optimization: Azure Monitor and Application Insights
- Docker: 12. Logging, Monitoring, and Debugging
- Math for SLOs and capacity: 2.4 Position and Shape (percentiles), 5.1 Discrete Distributions, 9.3 Queueing Theory (queueing theory)
Deep Dive
- 12. Simulation: simulating capacity scenarios
- 12. Quality of Service and Traffic Engineering: QoS and traffic engineering
- 13.4 Cost Optimization: cost engineering
Checkpoint
- Turn "the site should be fast" into an SLI, an SLO and an error budget policy.
- Why does latency explode as utilization approaches 100%? (Hint: 9.3 Queueing Theory)
- Write the first 15 minutes of an incident runbook for "p99 latency doubled".
8. Cloud Engineer (Azure)
Designs, builds and runs applications on Azure: identity, compute, storage, messaging and cost control.
Core
- Azure Developer
- 1. Azure Fundamentals for Developers: cloud concepts, regions, resource organization, SDKs
- 2.1 Microsoft Entra ID Fundamentals, 2.4 Managed Identities and Azure Identity Library, 2.5 Authorization with Azure RBAC: Entra ID, managed identities, RBAC
- 3. Azure Compute for Applications: VMs, App Service, Functions
- 4. Containers on Azure: ACR, Container Instances, Container Apps, AKS
- 5. Azure Storage Solutions, 6. Databases and Data Services: Blob Storage, Cosmos DB, SQL, Redis
- 7. Application Security: Key Vault, App Configuration, network security
- 11. Monitoring, Troubleshooting, and Optimization: monitoring and troubleshooting
- 12. Infrastructure as Code and DevOps: Bicep, ARM, Terraform, pipelines
- 14.4 Azure Well-Architected Framework: Well-Architected Framework
Recommended
- Azure Developer: 8. API Management and Integration, 9. Event-Based Solutions, 10. Message-Based Solutions, 14.1 Resiliency Patterns, 14.2 Data and Messaging Patterns, 14.3 Application Design Patterns, 14.5 Cost Management for Developers
- System Design: 10.4 Cloud-Native and Serverless, 13.4 Cost Optimization: cloud-native, serverless, cost optimization
- Cyber Security: 11. Cloud and Infrastructure Security: cloud security, zero trust
- Networking: 13.2 Virtualization and Overlays, 13.4 Cloud and Wide-Area Evolution: overlays, VNets, cloud networking
- Kubernetes: 3.2 Production Cluster Provisioning, 6. Networking
Deep Dive
- 13. AI and Intelligent Applications: Azure OpenAI and AI services
- 2.2 Authentication Protocols, 2.3 Microsoft Authentication Library (MSAL): OAuth 2.0 / OIDC flows with MSAL
- 15. Multi-Cluster and Federation: multi-cluster patterns
Checkpoint
- When would you pick Functions, Container Apps, App Service or AKS for the same workload?
- How does an app read a Key Vault secret without any credential in its code or config?
- Service Bus, Event Grid or Event Hubs: which one, and why? (See 10.3 Choosing a Messaging Service)
9. Data Engineer
Moves, stores and models data so analysts and ML systems can trust it. The core skills are SQL, pipelines, distributed processing and data quality.
Core
- Database Systems in Postgres
- 2. Relational Design and Data Modeling, 4. SQL Querying Fundamentals, 5. Advanced SQL in Postgres: modeling, SQL and analytical SQL
- 6. Storage Internals and Indexing, 7. Query Processing and Performance: storage layout, indexes, partitioning, query plans
- 8.1 Transaction Basics, 8.2 Isolation Levels, 8.3 Multiversion Concurrency Control: transactions and MVCC
- Data Science
- 4.1 Python for Data Science, 4.3 SQL and Query Languages: Python and SQL for data work
- 5. Data Acquisition and Storage: sources, storage systems, pipelines
- 6.1 Data Cleaning, 6.2 Data Transformation: cleaning and transformation
- 14. Big Data and Distributed Computing: Spark-style processing, streaming, performance
- System Design
- 4.6 Data Lifecycle Management, 7.2 Event Streaming, 7.3 Delivery Semantics: data lifecycle, event streaming, delivery semantics
- 14.1 Data Platform Architecture, 14.2 Batch and Stream Processing: lake and warehouse architecture, batch and stream processing
Recommended
- Database Systems in Postgres: 3.4 Semi-Structured Data, 12.2 Logical Replication: JSONB and logical replication / CDC
- System Design: 4.5 Partitioning and Sharding: partitioning and sharding
- Azure Developer: 5. Azure Storage Solutions, 6.1 Azure Cosmos DB Fundamentals, 9.3 Azure Event Hubs: Blob/ADLS, Cosmos DB, Event Hubs
- Data Science: 15.2 ML Engineering Infrastructure, 16.4 Governance and Regulation: ML infrastructure, data governance
- Probability and Statistics: 7.4 Bias and Data Quality: bias and data quality
Deep Dive
- 9. Storage Systems, 10. File Systems: storage and filesystems, for performance tuning
- 7.4 Dashboards and Reporting: dashboards and reporting
- 13.3 Monorepo Strategies: monorepo strategies for data platforms
Checkpoint
- Design an idempotent daily pipeline that can be re-run for any past date.
- Explain exactly-once in a streaming system and what it actually guarantees.
- When does partitioning a table hurt query performance instead of helping?
10. Data Scientist
Turns data into decisions. Statistical rigor comes first; modeling builds on it.
Core: Mathematics
- Probability and Statistics
- 2. Descriptive Statistics, 3. Probability Theory, 4. Random Variables and Distributions, 5. Common Probability Distributions: descriptive statistics, probability, distributions
- 6. Multivariate Probability: joint distributions, covariance, CLT
- 8. Statistical Estimation, 9. Hypothesis Testing: estimation, confidence intervals, hypothesis testing
- 10. Regression and Predictive Modeling: linear regression and GLMs
- Linear Algebra: 3. Systems of Linear Equations, 4. Matrix Algebra, 8. Eigenvalues and Eigenvectors, 9.5 Least Squares Approximation, 11.1 Singular Value Decomposition: systems, matrices, eigenvalues, least squares, SVD
- Calculus: 3. The Derivative, 12.3 Partial Derivatives, 12.5 Directional Derivatives and Gradients, 12.6 Multivariable Optimization: derivatives, gradients, optimization
Core: Data Science
- Data Science
- 1. Foundations of Data Science, 3. Statistical Foundations: lifecycle, framing questions, statistical foundations
- 4.1 Python for Data Science, 4.3 SQL and Query Languages: Python and SQL
- 6. Data Wrangling and Preparation, 7. Exploratory Data Analysis and Visualization: wrangling, feature engineering, EDA, visualization
- 8. Experimentation and Decision Science: experimental design and A/B testing
- 9. Machine Learning Fundamentals, 10. Supervised Learning, 11. Unsupervised Learning: ML fundamentals, supervised and unsupervised learning
- 17. Communication and Professional Practice: communicating results to stakeholders
Recommended
- Data Science: 3.5 Causal Inference, 8.3 Quasi-Experiments and Observational Studies, 13.1 Time Series Analysis, 13.5 Recommender Systems, 16.1 Model Interpretability, 16.2 Fairness and Bias
- Probability and Statistics: 11. Bayesian Statistics, 12.1 Time Series Analysis, 12.4 Causal Inference: Bayesian methods, time series, causal inference
- Database Systems in Postgres: 5.2 Window Functions, 5.4 Analytical Query Patterns: window functions and analytical SQL
Deep Dive
- 12. Deep Learning: deep learning
- 2. Linear Programming, 5.3 Convex Optimization: linear programming and convex optimization
- 3.5 Measure-Theoretic Foundations: measure-theoretic probability
Checkpoint
- An A/B test shows p = 0.04 after you checked results daily. Is the result valid?
- Explain the bias-variance trade-off and how regularization moves along it.
- When can't correlation in observational data be read as causation, and what can you do about it?
11. Machine Learning and AI Engineer
Builds, trains, serves and monitors models in production. Part data scientist, part backend engineer.
Core
- Math for ML
- 2.3 Dot Product and Geometry, 4. Matrix Algebra, 8. Eigenvalues and Eigenvectors, 11. Singular Value Decomposition and Matrix Analysis: dot products, matrix algebra, eigen-decomposition, SVD
- 3.3 Differentiation Rules, 12.4 Chain Rules and Implicit Functions, 12.5 Directional Derivatives and Gradients: chain rule (backpropagation) and gradients
- 3.4 Bayes' Theorem, 5.3 The Normal Distribution, 8.2 Estimation Methods: Bayes, the normal distribution, maximum likelihood
- Data Science
- 9. Machine Learning Fundamentals, 10. Supervised Learning: generalization, evaluation, tuning, supervised models
- 12. Deep Learning: neural networks, architectures, training at scale, foundation models
- 15. Productionizing Models and MLOps: deployment, ML infrastructure, monitoring, drift
- System Design: 14.3 Search and Recommendation Systems, 14.4 ML and AI Serving Systems: search, recommendation and model-serving systems
Recommended
- Data Science: 13.2 Natural Language Processing, 13.3 Computer Vision, 16.1 Model Interpretability, 16.3 Privacy and Security: NLP, CV, interpretability, privacy
- Azure Developer: 13. AI and Intelligent Applications: Azure OpenAI, RAG, building AI-powered apps
- Kubernetes: 17.2 GPU and Specialized Hardware, 17.4 AI/ML Workloads on Kubernetes: GPUs and ML workloads on Kubernetes
- Cyber Security: 14.2 AI and Machine Learning Security: adversarial ML, prompt injection
- Docker: 5.4 Multi-Stage Builds, 11. Resource Management and Performance: lean images and resource limits for model servers
- System Design: 5. Caching and Content Delivery: caching inference results and embeddings
Deep Dive
- 5. Nonlinear Optimization: nonlinear and convex optimization theory
- 14. Big Data and Distributed Computing: distributed training data pipelines
- 15. Performance and Low-Level Control: high-performance inference code
Checkpoint
- Derive the gradient for logistic regression using the chain rule.
- Your model is accurate offline and poor in production. List five causes.
- Design a low-latency serving path for an LLM feature, including caching and fallbacks.
12. Security Engineer
Protects systems by understanding how they break. Pick a specialization once the Core is solid.
Core (All Security Roles)
- Cyber Security
- 1. Foundations of Cyber Security, 2. Policy statements: principles, threat landscape, shell, Python tooling
- 3. Exceptions: symmetric and asymmetric cryptography, hashing, PKI
- 6. System and Network Security: authentication, access control, firewalls, network attacks
- 8. Web Security (Server Side), 9. Web Security (Client Side): server-side and client-side web security
- 10. Secure Development Lifecycle: threat modeling and secure SDLC
- Networking: 11. Network Security: network security
- Operative Systems: 12. Protection and Security: OS protection mechanisms
- Discrete Mathematics: 4.3 Modular Arithmetic, 4.4 Applications of Number Theory: modular arithmetic behind RSA and Diffie-Hellman
Specialization: Application Security
- 8.3 SQL Injection and Defences, 8.4 Blind SQL Injection, 8.6 API and Mobile Back-End Security, 9.2 Cross-Site Scripting (XSS), 9.3 Cross-Site Request Forgery (CSRF)
- 10.2 Cookies and Sessions, 10.3 Authentication and Authorization, 17.1 Web Application Security
- 11. Security and Compliance (DevSecOps): SAST, DAST and dependency scanning in pipelines
- 18.4 Security Essentials: Spring Security
Specialization: Offensive Security / Exploitation
- 4. Compliance, 5. Related documents, 12. Offensive Security: x86-64, program analysis, memory corruption, pentesting
- 5.2 Pointer Fundamentals, 7.3 Memory Errors, 12.2 Undefined and Unspecified Behavior, 13.3 Secure and Maintainable C: pointers, memory errors, undefined behavior, secure C
Specialization: Defensive / Cloud Security
- 7. System and Endpoint Hardening, 11. Cloud and Infrastructure Security, 13. Defensive Operations and Incident Response: hardening, cloud security, SOC, incident response, forensics
- 9. Security, 10. Docker Security: cluster and container security
- 2. Identity and Access for Applications, 7. Application Security: identity and secrets in Azure
Deep Dive
- 14. Emerging and Specialized Topics: privacy engineering, AI security, frontier topics
- 3. Ownership and Memory Model, 14. Unsafe Rust and Systems Interop: how memory safety is enforced, and where
unsafebreaks it
Checkpoint
- Walk through a TLS 1.3 handshake and say what each step protects against.
- Why do parameterized queries prevent SQL injection while escaping often fails?
- Explain how stack canaries, NX and ASLR each make a stack overflow harder to exploit.
13. Systems and Embedded Engineer
Writes code close to the hardware: kernels, drivers, runtimes, firmware, high-performance infrastructure.
Core
- C Programming Language
- 1. Foundations and Toolchain to 7. Memory Management: the language, pointers and manual memory management
- 8. The Preprocessor: the preprocessor
- 11. Systems Programming: processes, file I/O, sockets, threads
- 12. Low-Level and Advanced Topics: bit manipulation, undefined behavior, freestanding C
- Operative Systems
- 1. Introduction to Operating Systems to 8. Virtual Memory: processes, threads, scheduling, synchronization, memory, virtual memory
- 11. Input/Output Systems: I/O hardware and kernel I/O subsystem
- Rust Programming Language: 3. Ownership and Memory Model, 9. Smart Pointers and Interior Mutability, 10. Concurrency and Parallelism, 14. Unsafe Rust and Systems Interop, 15.3 Embedded and no_std: ownership, smart pointers, concurrency, unsafe/FFI,
no_std - Discrete Mathematics: 11. Boolean Algebra: Boolean algebra and logic circuits
Recommended
- C Programming Language: 10. Data Structures and Algorithms in C, 13. Quality, Debugging, and Security: data structures in C, debugging, sanitizers
- Operative Systems: 9. Storage Systems, 10. File Systems, 13.1 Virtualization Concepts, 13.2 Virtualization Implementation, 14.2 Real-Time and Embedded Systems: storage, filesystems, hypervisors, real-time systems
- Rust Programming Language: 15.1 Optimization Techniques, 15.2 Data-Oriented Design: optimization and data-oriented design
- Cyber Security: 4.1 Assembly x86-64, 5.4 Exploit Mitigations: assembly and exploit mitigations
- Networking: 9.1 The Socket API: the socket API
Deep Dive
- 1.2 Linux Foundations of Containers: namespaces and cgroups
- 15.1 System Case Studies: Linux and Windows case studies
- 16.5 WebAssembly: WebAssembly
- 13. Formal Languages and Automata: finite-state machines, a natural fit for protocol and firmware logic
- 10.4 Short-Range and IoT Networking: IoT and short-range networking
Checkpoint
- What happens on a page fault, from the MMU to the instruction being retried?
- Give three examples of undefined behavior in C that compilers actively exploit.
- How does Rust's
Send/Syncprevent data races at compile time?
14. Network Engineer
Builds and operates networks and network software: routing, load balancers, SDN, observability of traffic.
Core
- Networking
- 1. Foundations of Computer Networking, 2. Network Architecture and Layered Models: fundamentals and layered models
- 4. The Data Link Layer: Ethernet, switching, ARP
- 5. The Network Layer and IP Addressing: IPv4/IPv6, subnetting, ICMP, NAT
- 6. Routing: routing algorithms, OSPF, BGP
- 7. The Transport Layer: TCP, UDP, flow and congestion control, QUIC
- 8. The Application Layer: DNS, HTTP, CDN
- 14. Network Operations, Analysis, and Troubleshooting: tools, packet analysis, troubleshooting
Recommended
- Networking: 9. Network Programming, 11. Network Security, 12. Quality of Service and Traffic Engineering, 13. Modern Network Infrastructure: programming, security, QoS, SDN and data centers
- Cyber Security: 6.4 Firewalls and Perimeter Defense, 6.5 Network Attacks, 6.6 Secure Communication Protocols: firewalls, network attacks, secure protocols
- Kubernetes: 6. Networking: CNI, Services, Ingress, NetworkPolicy
- Docker: 7. Docker Networking: container network drivers
- Algorithms behind routing: 8.4 Traversals and Paths, 3.2 Shortest Path Problems, 3.4 Maximum Flow Problems
Deep Dive
- 3. The Physical Layer: the physical layer
- 10. Wireless and Mobile Networking: Wi-Fi, cellular, mobility
- 15. Advanced and Emerging Topics: distributed systems networking, measurement
- 13. Service Mesh: service mesh
- 9.3 Queueing Theory: queueing models of links and buffers
Checkpoint
- Subnet
10.20.0.0/16into 6 networks of at least 2000 hosts each. - Why can BGP converge slowly, and what does that mean for an outage?
- Use a packet capture to tell packet loss apart from a slow application.
15. Database Engineer
Owns the data tier: schema design, query performance, replication, backups and upgrades.
Core
- Database Systems in Postgres
- 2. Relational Design and Data Modeling, 3. Data Types and Domain Modeling: modeling, keys, normalization, data types
- 4. SQL Querying Fundamentals, 5. Advanced SQL in Postgres: SQL fundamentals and advanced SQL
- 6. Storage Internals and Indexing, 7. Query Processing and Performance: storage internals, indexing, the planner, tuning
- 8. Transactions and Concurrency: isolation, MVCC, locking, vacuum
- 11. Administration and Operations: configuration, WAL, backup and recovery
- 12. Replication and High Availability: physical and logical replication, HA, scaling out
Recommended
- Database Systems in Postgres: 9. Server-Side Programming, 10. Security and Access Control, 13. Extensions and the Postgres Ecosystem: PL/pgSQL, row-level security, extensions
- System Design: 4. Content negotiation — the most "correct" by HTTP semantics, least used, 8.2 Consistency Models, 8.4 Consensus and Coordination, 8.5 Distributed Transactions: storage engines, consistency, consensus, distributed transactions
- Operative Systems: 9.3 Reliability and Performance, 10.4 Consistency and Recovery: disk reliability, journaling and crash recovery
- Algorithms and Data Structures: 7. Trees: tree structures behind indexes
Deep Dive
- 6. Databases and Data Services: Cosmos DB partitioning and consistency levels
- 13. Storage and Data Persistence: MongoDB and Redis
- 4.3 StatefulSets: running databases on StatefulSets
Checkpoint
- Explain how MVCC lets readers and writers avoid blocking each other, and what vacuum cleans up.
- Design a backup strategy with a 5-minute RPO and a 30-minute RTO.
- A query got 10x slower after a data load. What do you check first?
16. FinTech Engineer (Banking and Treasury)
Builds software for banks: payments, treasury, risk and regulatory reporting. Correctness, auditability and precision matter more than anything else.
Core
- Banking for Software Engineers (Treasury Focus)
- 1. Banking Fundamentals: how banks make money, balance sheets, central banks
- 2. Payments, Clearing and Settlement: payment rails, clearing and settlement
- 3.2 Time Value of Money, 3.4 Fixed Income Securities, 3.5 Foreign Exchange: time value of money, bonds, FX
- 4.3 Trade Lifecycle: trade lifecycle
- 5. Liquidity Management: liquidity management
- 11. Quantitative Building Blocks for Treasury Software: day-count conventions, yield curves, pricing, numerical correctness
- 12. Messaging Standards and Integration: SWIFT, ISO 20022, FIX, integration
- 13. Treasury Systems Architecture: system landscape, data architecture, reconciliation
- 15. Engineering Reliable and Secure Treasury Software: testing, resilience, security, change management in regulated banks
- System Design: 7.3 Delivery Semantics, 8.5 Distributed Transactions, 15.4 Transactional and Real-Time Systems: delivery semantics, sagas, transactional systems
- Database Systems in Postgres: 8. Transactions and Concurrency: transactions and concurrency
Recommended
- Banking for Software Engineers (Treasury Focus): 6. Asset-Liability Management and Interest Rate Risk, 7. Funding and Capital Management, 8. Market and Counterparty Risk in Treasury, 9. Regulatory Framework, 14. Accounting and Financial Reporting for Treasury
- Object Oriented Programming in Java: 12. Concurrency & Parallelism, 17. The Spring Framework, 18. Spring Boot and Production Applications: the dominant stack in banks
- Cyber Security: 10.1 Threat Modeling and Secure Design: threat modeling
- Math: 9.6 Taylor and Maclaurin Series (duration and convexity are Taylor expansions), 5.3 The Normal Distribution, 12.1 Time Series Analysis
Deep Dive
- 16. Advanced Topics and Emerging Trends: stress testing, real-time treasury, tokenization
- 2. Linear Programming, 9.4 Stochastic Programming: optimization for ALM and funding decisions
Checkpoint
- Why must money never be a
double? Name the type you would use instead. - Describe the lifecycle of an FX trade from execution to settlement and reconciliation.
- How do you guarantee a payment message is processed exactly once across two systems?
17. Technical Interview Track
A focused path for coding and system design interviews, whatever the role.
Coding Interviews
- Algorithms and Data Structures: go through every chapter in order, 0. Interview Foundations to 17. Math and Geometry
- 10.2 Growth of Functions, 6.2 Divide-and-Conquer Recurrences: growth of functions, Master theorem
- 5. Combinatorics: combinatorics for counting problems
System Design Interviews
- 1.3 Requirement Gathering and Estimation: requirement gathering and back-of-the-envelope estimation
- 4. Content negotiation — the most "correct" by HTTP semantics, least used, 5. Caching and Content Delivery, 6. Scalability and Load Management, 7. Asynchronous Processing and Messaging: the building blocks
- 8.1 Fundamental Constraints, 8.2 Consistency Models: CAP and consistency models
- 15. Applied System Design Case Studies: case studies, especially 15.5 Communicating a Design
Role-Specific Question Banks
18. Notes-to-Roles Matrix
Use this to see quickly which notes matter for which role. Primary means the note is central to the role's Core. Secondary means it appears in Recommended or Deep Dive.
| Note | Primary for | Secondary for |
|---|---|---|
| Algorithms and Data Structures | Common Core, Interview | Database |
| System Design | Backend, SRE, Data, ML/AI, FinTech | Full-Stack, DevOps, Cloud, Database, Frontend |
| Operative Systems | Systems, Security, SRE | Backend, DevOps, Data, Database |
| Networking | Network, Security, SRE | Backend, DevOps, Cloud, Systems |
| Database Systems in Postgres | Backend, Data, Database, FinTech | Full-Stack, SRE, Data Scientist |
| C Programming Language | Systems | Security (Offensive) |
| Rust Programming Language | Systems | Backend, Security, ML/AI |
| Object Oriented Programming in Java | Backend | FinTech, Security (AppSec), Interview |
| Web Technologies | Frontend, Full-Stack | Backend, Security (AppSec) |
| React Interview Study Guide | Frontend, Full-Stack | Interview |
| Docker | DevOps | Backend, Full-Stack, ML/AI, Network, Security |
| Kubernetes | DevOps, SRE | Cloud, ML/AI, Network, Security |
| GitLab CI/CD | DevOps | Full-Stack, Security (AppSec) |
| Azure Developer | Cloud | DevOps, SRE, Data, ML/AI, Security |
| Cyber Security | Security | Backend, Frontend, DevOps, Cloud, ML/AI |
| Data Science | Data Scientist, ML/AI, Data | |
| Probability and Statistics | Data Scientist, ML/AI | SRE, Data, FinTech |
| Linear Algebra | Data Scientist, ML/AI | |
| Calculus | Data Scientist, ML/AI | FinTech |
| Discrete Mathematics | Common Core | Security, Systems, Network, Interview |
| Operative Research | SRE, Network, Data Scientist, ML/AI, FinTech | |
| Banking for Software Engineers (Treasury Focus) | FinTech |