Traditional enterprise networking careers ran through a clear path: CCNA, then CCNP, eventually CCIE if you wanted to be at the top. In 2026, the path is no longer that simple. Enterprise networking is shifting to cloud-native topologies, SDN, and overlay networks. The question I get from CCNA holders weekly: do I still take CCNP, or is the cloud networking cert (AWS ANS-C01 or Azure AZ-700) the better next move?
Honest answer: it depends on your employer type, geography, and career direction. Let me break it down.
The short answer
- If you work at a large enterprise, telco, or service provider: CCNP is still the right next step.
- If you work at a cloud-native company or SMB using primarily cloud infrastructure: Cloud networking cert is the better move.
- If you are a consultant or unsure: Both, but in specific order.
The rest is detail.
What changed in enterprise networking
Five shifts over the past five years that have redistributed the networking career map:
1. Overlay networks are the new underlay
Companies that used to run physical Layer 2/3 topologies now run overlay networks (VXLAN, EVPN, Geneve) on top of physical fabrics. Cisco ACI, Arista EOS, Juniper Apstra, Nokia fabric products all standardize on this model. The skills to design and operate overlay networks are not purely Cisco anymore.
2. SD-WAN replaced branch routing
Branch offices used to require router configuration at each site. SD-WAN products (Cisco Viptela, Cisco Meraki, Fortinet, Silver Peak/Aruba EdgeConnect, VeloCloud/VMware) have replaced most branch routing with cloud-orchestrated overlays. Traditional CCNA-level branch configuration is a declining skill.
3. Cloud networking is half of modern enterprise networking
The typical Fortune 500 now has as much networking in AWS/Azure/GCP as in its on-prem environment. Cloud VPC design, Transit Gateway, ExpressRoute, Direct Connect, private endpoints, cloud DNS, cloud load balancing — these skills did not exist in CCNA/CCNP scope 10 years ago and are now job-critical.
4. Automation replaced individual device config
NetDevOps, Ansible, Terraform, Cisco NSO, Arista CloudVision — the expectation at senior levels is that you can configure hundreds of devices with code, not CLI-by-CLI. Programming skills (Python especially) have become networking skills.
5. Security mesh and zero trust
Enterprise networking and enterprise security used to be separate teams. In 2026 they are increasingly merged. Network engineers are expected to understand Zero Trust Network Access (ZTNA), Secure Service Edge (SSE), and identity-aware networking. Cloud-delivered security is now a networking concern.
Where CCNP still matters
Despite all five shifts, CCNP remains the canonical certification for:
1. Service providers and telcos. Comcast, Verizon, AT&T, Lumen, and the equivalents worldwide still run massive Cisco environments and hire CCNP/CCIE holders at premium.
2. Large enterprises with Cisco-primary networks. Fortune 500 companies with existing Cisco investments still need CCNP-skilled engineers. Turnover in these environments is low and salaries are good.
3. Government and defense. DoD networks, federal agencies, defense contractors — Cisco-heavy environments, CCNP is often the credentialing standard.
4. Consulting firms specializing in enterprise networking. Big firms (Accenture, Deloitte, IBM) still bill out CCNP/CCIE engineers at premium rates for migration and architecture projects.
Where cloud networking is the better move
1. Cloud-native companies. Stripe, Airbnb, Netflix, Shopify, any SaaS company. CCNP skills rarely show up in job descriptions; AWS ANS-C01 or Azure AZ-700 do.
2. SMBs. Small and mid-size businesses increasingly have zero on-prem networking. Cloud networking is the full scope.
3. DevOps and platform engineering roles. Even at large enterprises, these teams do cloud networking, not traditional networking.
4. Companies doing cloud migration. The next 5 years will be dominated by on-prem-to-cloud migrations. Cloud networking skills are directly monetized.
The 2026 salary data
US median base salary for senior roles requiring each cert (90-day sample):
- CCNP Enterprise: $138,000 (at large-enterprise employers)
- CCIE: $175,000 (rare but well-paid)
- AWS ANS-C01 (Advanced Networking Specialty): $164,000
- Azure AZ-700 (Network Engineer Associate): $145,000
Cloud networking pays more than CCNP on average. But CCIE still beats everything. And the real insight is that dual-credential people (CCNP + cloud networking) command the highest premiums of all — median $185,000 — because they are valuable for hybrid-cloud migrations.
The recommended path
If you hold CCNA and your employer is enterprise
- CCNP Enterprise (ENCOR + ENARSI concentration)
- One cloud networking cert (ANS-C01 if AWS-shop, AZ-700 if Azure-shop)
- Python + Ansible competence
- Optional: CCIE Enterprise
Timeline: 18–30 months.
If you hold CCNA and your employer is cloud-native
- Cloud networking cert first (ANS-C01 preferred for most markets)
- Then CCNP if you want to stay broadly employable
- Python + Terraform competence
- Optional: cloud security cert
Timeline: 12–18 months.
If you hold CCNA and are unemployed or pivoting
- Cloud networking cert first (more jobs, broader market)
- Skip CCNP unless a specific target employer requires it
- Focus on practical labs and portfolio projects
- Python + Terraform are table stakes
Timeline: 9–12 months.
The CCNP track itself
For anyone going CCNP, the 2026 path:
Core exam (ENCOR 350-401): required. 120 minutes, ~100 questions. Covers enterprise infrastructure, virtualization, network assurance, security, automation. Pass this first.
Concentration exam: choose one from six specializations:
- Advanced Routing (ENARSI) — most popular, best for WAN/branch focus
- Advanced Wireless (ENWLSI)
- Advanced Security (SCOR)
- Advanced Automation (ENAUTO) — increasingly relevant
- Advanced Design (ENSLD)
- SD-WAN (ENSDWI) — relevant for modern branch work
I'd recommend ENARSI for most candidates unless you have a specific specialty focus. ENAUTO is a strong second choice for candidates who want to skill up on programmability.
Study time: 300–400 hours for both exams combined. It is a big investment.
The cloud networking path
For someone going the cloud route after CCNA:
AWS Advanced Networking Specialty (ANS-C01):
- 65 questions, 170 minutes
- $300 exam fee
- Study time: 120–160 hours
- Covers: VPC design, Transit Gateway, Direct Connect, Global Accelerator, CloudFront, Route 53, PrivateLink, hybrid networking
- Deep and challenging. A strong CCNA background helps but is not sufficient; AWS-specific knowledge is required.
Azure AZ-700 (Network Engineer Associate):
- ~55 questions, 120 minutes
- $165 exam fee
- Study time: 80–120 hours
- Covers: VNet design, ExpressRoute, VPN Gateway, Azure Firewall, Front Door, Application Gateway, private endpoints
- Less deep than ANS-C01 but covers the same scope for Azure.
The common mistake
CCNA holders sometimes assume CCNP is the obvious next step because it was the obvious next step for their mentor or teammate 10 years ago. The market has changed. Check your current employer's job descriptions. Look at what senior networking roles at your company name. The data is usually clear.
Another common mistake: CCNA holders over-invest in hands-on Cisco labs (GNS3, EVE-NG) when their career direction should take them to cloud. Lab time is valuable, but lab time on obsolete-for-your-career skills is wasted. Align the labs with the cert path.
What I would do if I held CCNA today
If I were starting over with a fresh CCNA, I would go cloud networking first. ANS-C01 specifically. The market signal for cloud networking skills in 2026 is unambiguous, and the ROI beats CCNP for most candidates.
I would add CCNP later only if my employer specifically needs it or I move into a role where it matters.
If I were already deep into an enterprise-networking career with a Cisco-heavy employer, I would still do CCNP. But I would add cloud networking immediately after. Single-discipline networking careers are a shrinking niche.
The 20-year network engineer who only knows traditional networking is a vulnerable career position. The 20-year network engineer who knows traditional AND cloud networking is one of the most valuable and rare profiles in the 2026 market.
Build the hybrid profile. The market rewards it.