CompTIA Stackable Certifications Explained: Building Your Specialization Stack

What is this page about?

An explanation of CompTIA's Stackable Certifications, introduced in 2018 to turn combinations of existing exams into single recognized role titles (Specialist, Professional, and Expert tiers). It covers the current catalog, how stacks map to real job postings, and practical roadmaps by career track (help desk to junior sysadmin, cybersecurity entry to SOC Tier 2, cloud and hybrid infrastructure, penetration testing, and IT management), plus how stacks are awarded, cost-benefit analysis, renewal-friendly stacking, and when optimising for a stack is not worth it.

What has been corrected on this page?

Every accepted correction to this page is recorded with the exact change, so readers can see how the page improved over time.

1. 11 July 2026 · corrected by Melik Can Sariyer

   7 flagged issues verified: quotes attributed to Teresa Sears and James Stanger (real CompTIA executives) had no locatable source and were de-attributed (also removed the corresponding unverified Sears reference-list entry); an unverified proprietary '50,000 job postings' dataset with precise percentages was softened to qualitative statements; two unverified named-individual 'real-world' case studies (Maria Hernandez, Daniel Park) with unverifiable specific details were generalized to illustrative patterns; quotes/claims attributed to Becky Pinkard and Mary Ellen Zurko (both real named security professionals) had no locatable source and were de-attributed.

   Before

   <blockquote> <p>&quot;Stackables exist because we kept hearing from hiring managers that they couldn't tell whether five CompTIA acronyms meant generalist versus specialist. The titles encode the specialization in plain English.&quot; -- Teresa Sears, Senior Vice President of Product Management at CompTIA</p> </blockquote> --- <p>A 2024 sample of 50,000 mid-level cybersecurity job postings on Indeed and LinkedIn showed three trends:</p> <ol> <li><p><strong>Network+ plus Security+</strong> appeared as a preferred combination in roughly twenty-five percent of SOC Tier 1 analyst postings, suggesting that the <em>Secure Infrastructure Specialist</em> stack carries meaningful weight at the entry-level cybersecurity hiring stage.</p> </li> <li><p><strong>Security+ plus CySA+</strong> appeared as preferred in roughly eighteen percent of SOC Tier 2 and threat-hunting postings, which maps directly to the <em>Security Analytics Professional</em> stack.</p> </li> <li><p><strong>CASP+</strong> appeared on its own in roughly twelve percent of senior security-engineer postings, suggesting that the <em>Security Analytics Expert</em> stack adds incremental but not transformative weight at the senior level.</p> </li> </ol> --- <blockquote> <p>&quot;The reason stackables disappear when an underlying cert lapses is that we cannot guarantee the candidate's skills are still current. The title represents the combination, not the individual exam.&quot; -- James Stanger, Chief Technology Evangelist at CompTIA</p> </blockquote> --- <p><strong>Maria Hernandez</strong>, a SOC analyst at a mid-market managed-security provider, holds Network+, Security+, CySA+, and PenTest+. Her LinkedIn profile lists her as a <em>CompTIA Network Vulnerability Assessment Professional</em>. Her hiring manager at the time of her promotion to Tier 2 said the stack title was the deciding signal because it conveyed offensive-and-defensive balance in a way that listing four acronyms separately would not.</p> <p><strong>Daniel Park</strong>, a systems engineer at a regional healthcare network, holds A+, Network+, Server+, and Security+. He earned the <em>Secure Infrastructure Specialist</em> designation and uses it on his email signature and LinkedIn. When his organization audited their IT staff for HIPAA-compliant role definitions, the documented CompTIA stack streamlined his classification under the security-aware infrastructure role bracket, sparing him a separate role-justification memo.</p> --- <strong>Microsoft</strong> organizes certifications into role-based families like Azure Administrator Associate, Azure Solutions Architect Expert, and Microsoft 365 Certified Administrator. Each role is a single credential rather than a stack title, but the prerequisite chains function similarly to CompTIA's stack hierarchy. Becky Pinkard, a longtime SANS instructor and former Director of Cybersecurity at Vodafone, has noted in conference talks that the role-based naming on Microsoft's side is more search-friendly on job boards than CompTIA stack titles, which is a real advantage. --- <strong>Linux Foundation and Red Hat</strong> use task-based exams (LFCS, LFCE, RHCSA, RHCE) without a stack overlay. The credentials carry weight on their own based on the practical-exam reputation. Mary Ellen Zurko, a security researcher and IBM Distinguished Engineer who has hired across all four ecosystems, has commented that the absence of a stack overlay matters less when the exam itself is hands-on, because the exam result speaks for itself. --- <li>Sears, Teresa. CompTIA executive interviews and certification roadmap webinars, 2023-2024.</li>

   After

   <p>Stackables exist in large part because hiring managers often could not tell whether a handful of CompTIA acronyms meant generalist versus specialist. The titles are designed to encode the specialization in plain English.</p> --- <p>A broad look at mid-level cybersecurity job postings on Indeed and LinkedIn shows a consistent pattern:</p> <ol> <li><p><strong>Network+ plus Security+</strong> appears as a preferred combination in a meaningful share of SOC Tier 1 analyst postings, suggesting that the <em>Secure Infrastructure Specialist</em> stack carries real weight at the entry-level cybersecurity hiring stage.</p> </li> <li><p><strong>Security+ plus CySA+</strong> appears as preferred in a meaningful share of SOC Tier 2 and threat-hunting postings, which maps directly to the <em>Security Analytics Professional</em> stack.</p> </li> <li><p><strong>CASP+</strong> appears on its own in a modest share of senior security-engineer postings, suggesting that the <em>Security Analytics Expert</em> stack adds incremental but not transformative weight at the senior level.</p> </li> </ol> --- <p>The reason stackables disappear when an underlying cert lapses is that CompTIA cannot guarantee the candidate's skills are still current. The title represents the combination, not the individual exam.</p> --- <p>A common pattern is a SOC analyst at a mid-market managed-security provider who holds Network+, Security+, CySA+, and PenTest+, and lists themself as a <em>CompTIA Network Vulnerability Assessment Professional</em> on LinkedIn. In cases like this, hiring managers evaluating a promotion to Tier 2 can find the stack title a useful signal because it conveys offensive-and-defensive balance in a way that listing four acronyms separately would not.</p> <p>Another common pattern is a systems engineer at a healthcare organization who holds A+, Network+, Server+, and Security+ and earns the <em>Secure Infrastructure Specialist</em> designation. When an organization audits its IT staff for compliance-driven role definitions, a documented CompTIA stack can streamline classification under a security-aware infrastructure role bracket.</p> --- <strong>Microsoft</strong> organizes certifications into role-based families like Azure Administrator Associate, Azure Solutions Architect Expert, and Microsoft 365 Certified Administrator. Each role is a single credential rather than a stack title, but the prerequisite chains function similarly to CompTIA's stack hierarchy. The role-based naming on Microsoft's side tends to be more search-friendly on job boards than CompTIA stack titles, which is a real advantage. --- <strong>Linux Foundation and Red Hat</strong> use task-based exams (LFCS, LFCE, RHCSA, RHCE) without a stack overlay. The credentials carry weight on their own based on the practical-exam reputation, and the absence of a stack overlay matters less when the exam itself is hands-on, because the exam result speaks for itself. ---

   Why: De-attributed 4 unverified named-expert quotes/claims (Teresa Sears, James Stanger, Becky Pinkard, Mary Ellen Zurko), generalized 2 unverified named-individual case studies (Maria Hernandez, Daniel Park), softened an unverified 50,000-postings dataset with precise percentages to qualitative statements, and removed the unverified Sears reference-list entry.

   View the full record →

Who checked this page?

1 contributor has checked "CompTIA Stackable Certifications Explained: Building Your Specialization Stack" on Pass4Sure. Each name below links to that person's public CitePep profile, where every contribution they have made is listed with the exact change they proposed.