Stack one credentialed specialty in the next 12 months — AWS/GCP Professional or CKA plus a security cert (CISSP-track or OSCP) — to convert from generic sysadmin into a platform/SRE or security-engineer pipeline where pay bands jump 30-60%.

Pick one infra-automation domain (Terraform/IaC, Kubernetes operators, or detection engineering) and ship a public GitHub repo plus a blog series this year — moves visibility from 'invisible' toward 'active', which is the cheapest lever at this stage.

Run a deliberate job-hop into a name-brand tech employer within 18 months — the employer-quality jump from 'well-known' to 'top-tier' alone reprices a mid-level infra IC by 40-80% and unlocks the senior-IC ladder.