Tag: developer skills

  • Great Resignation Spurs Interest in Tech Certifications

    Great Resignation Spurs Interest in Tech Certifications

    It has been almost a year since the phenomenon known as the Great Resignation started appearing in national news. The reports showed millions of U.S. workers leaving their jobs each month to look for something better. This trend, according to the latest news, is not going away.

    While labor experts have provided a steady stream of speculation about why people are leaving their jobs, from frustration with pay to fear of COVID-19 to a desire to find positions that are more meaningful, they have yet to arrive at a consensus as to what those who are now out of work are doing with their time.

    In the world of IT and tech, it appears that those who joined the Great Resignation are spending their spare time growing their skills and improving their resumes by pursuing tech certifications.

    Tech Courses Surge in Popularity in 2021

    According to Class Central, a search engine and review site for free online courses, the top online courses for 2021 were tech courses, many of which are offered by Google and provide the type of certifications that look great on a resume. Here are some examples of the top courses:

    • Foundations of User Experience (UX) Design, which is the first in a series of seven courses on the topic.
    • Data Analysis With R Programming, which provides training on how to “clean, organize, analyze, visualize and report data in new and more powerful ways.”
    • AWS Cloud Technical Essentials, which presents the fundamentals of AWS.
    • AWS Cloud Practitioner Essentials, which explores “fundamental AWS Cloud concepts to help you gain confidence to contribute to your organization’s cloud initiatives.”

    Certifications That Pay Dividends

    In general, certifications provide a boost to job seekers. They communicate a commitment to professional development as well as provide a reliable catalog of the skills that one will bring to a position. For those looking to stand out, certifications can definitely increase the chances that you’ll get an interview.

    However, it is critical to think of the opportunity cost of an individual’s time. While we love free certifications, many of the free certifications are unlikely to help someone start their career. In many cases, after the person spends months achieving these free certifications, they will need to spend additional time getting new certifications to ensure that they have the specific certifications that employers desire. When you consider the salaries some of these tech positions command, spending months on the wrong free certifications can cost someone tens of thousands of dollars in lost earnings.

    While the following certifications may be more difficult to achieve and might not be available for free, they definitely make a difference in terms of preparing IT workers for the most desirable jobs:

    • Networking – Cisco Certified Internet Expert (CCIE) and Cisco Certified Networking Professional
    • Cloud Computing – Azure Expert, AWS Certified Solution Architect Professional and Google Professional Cloud Architect
    • Security – Certified Information System Security Professional, Certified Information Security Manager, Certified in Risk and Information Security Control, or CRISC (Note: these certifications required documented experience)
    • Cloud DevOps – AWS DevOps Engineer Professional

    Adding Soft Skills to Certifications

    The certification process can provide the technical skills for which many IT employers are looking. And promoting certifications on your resume can significantly increase the chances that you’ll be called in for an interview. However, in my experience, landing the job is one thing; thriving in it requires a different set of skills that fall outside the realm of IT certifications.

    Soft skills are not the skills that allow you to do your job, like coding or engineering. They are the skills that define how you do your job. They include people skills like networking, communication and conflict resolution, as well as creative thinking and time management. When applied to the world of IT, I like to think of them as “certifications plus.”

    While IT workers often overlook the value of soft skills, I can assure you that IT employers definitely do not. With the fierce competition that exists for IT work, IT providers need every advantage they can get to acquire and retain clients. If their workers do not have people skills to pair with their tech skills, companies lose that advantage.

    For those looking to boost their appeal to employers by acquiring certifications, take some time to get certified in soft skills. The courses exist and they will pay you great dividends both before and after you land the job.

    Bringing an End to the Great Resignation

    For IT companies, the growing popularity of certification courses may offer some insight on how to bring an end to the Great Resignation, at least within the IT sector.

    Recent research showed that IT “resigners” are wrestling with many of the same employment issues as those in other industries, including frustrations with salary and the desire to have more work flexibility. However, tech workers also cited some issues that indicate that certification training, provided before employees resign, might be enough to keep them at their desks.

    For example, the top reason cited by workers at tech, IT and software development companies for wanting to leave their job, other than salary and benefits, was limited career progression. In addition, nine out of 10 said they “would like to get more learning and development opportunities from their company.”

    For tech workers looking for a job, “skills development” was the second-highest criteria they considered behind salary and benefits when selecting a company. More than 60% also reported that “more learning and training opportunities would make them more motivated at work” and 75% felt that their companies focused more on attracting new employees than they did on investing in existing employees.

    Could it be that retaining IT employees and filling the positions left open by the Great Resignation is as simple as making certification training available to employees?

  • Improving Software Security in 2022

    Improving Software Security in 2022

    The recent Log4j vulnerability showed just how quickly a security bug could disrupt not just an industry, but the entire world.

    Organizations, especially federal agencies, will always find themselves at some level of risk, but they can also do more to mitigate those challenges. In November 2021, the Biden administration issued a directive through the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) to fix hundreds of software and hardware vulnerabilities. 

    While this effort created an immediate call-to-action to patch known security risks, organizations from all industries must constantly manage known and unknown threats. A study released in July 2021 found it took organizations an average of 205 days to fix critical vulnerabilities, a timeframe that provided bad actors a wealth of opportunity to conduct serious damage.

    Agencies must adopt a more proactive approach to cybersecurity by improving software code quality. Let’s look at how to do that.

    An Ounce of Prevention

    Shaking up the status quo does tend to raise a few eyebrows, but the truth is that security programs should be in a constant state of continuous improvement. Today, our security programs work in an overly reactive state that relies too heavily on mitigation once a threat has emerged.

    Emphasizing a preventative approach may not be widely understood outside the security team, especially when an agency has a relatively clean security record. It might be seen as something that isn’t broken and, therefore, doesn’t need fixing. In this instance, getting leadership buy-in at all levels of an agency is important.

    Some pertinent points security executives should emphasize to change security culture inside their organization include:

    • The time and cost savings achieved through preventative measures, such as role-based training and related tools, as opposed to the potential cost of a critical incident.
    • Finding and fixing software vulnerabilities as code is written keeps releases on time with fewer showstoppers from the security team.
    • Preparing for and preempting potential security risks from the development team to release saves time and money overall. 

    Shifting Left of Left

    Shifting left has been popular in Agile and DevOps environments for over a decade. It involves testing small software components as early as possible rather than waiting until the end of the sprint.

    To create more secure code, organizations need to start left of left, eliminating common vulnerabilities as early as possible to create a safer user experience. 

    Starting left of left is a developer-first concept and requires organizations to get serious about uplifting their engineering cohort, placing emphasis on the creation of high-quality code. Security-aware developers are worth their weight in gold, and they need support in the form of job-relevant, hands-on training in secure code as well as the ability to provision the right tools. The opportunity to be mentored by more experienced developers will also foster an environment where code is crafted with a security-first mindset and the precision required to take software to the next level.

    One key area that often gets overlooked is the user experience; particularly with regard to how users access information.

    Security misconfigurations accounted for 21% of cloud-based data breaches in the past year, and amateur-hour errors (like storing passwords in plaintext, for example) resulted in serious productivity and customer trust losses. To avoid these errors, aim for a secure user experience that weaves tight security into a flow that makes sense. Adding more barriers—complex password requirements, a CAPTCHA, a horde of flesh-eating zombies—can turn users away. On the other hand, getting too permissive with security measures renders the entire point moot.

    A successful, secure user experience needs to weave tight security into a flow that makes sense, presented in a way that doesn’t detract from anything compelling about the software. 

    Improved Developer Upskilling

    Developers, of course, want to write secure code, but they often lack those skills or need a refresher course. Meaningful training too often gets overlooked as the day-to-day needs of organizations allow for little time to improve skills.

    In working with developers, we’ve found that about 75% prefer structured on-the-job learning instead of opening a manual. They would rather learn by doing and want training focused on practical applications, something that most current training programs are missing.

    Look for any and all opportunities to upskill your developers. They are on the front lines when it comes to stopping vulnerabilities. Provide them both the time and right-fit resources, understanding that these efforts will pay considerable dividends in the future.

    Government agencies, in particular, face inherent challenges in keeping their systems secure. They often must manage outdated systems with few financial resources and fight for top talent in an incredibly competitive market. There is no panacea for removing vulnerabilities, but taking a proactive and preventative approach that emphasizes the customer experience with highly skilled developers can help agencies take significant steps forward.