Skip to programme
AI-generated Diploma in Multi-Cloud & Cyber Security Engineering +Ai campaign scene

Multi-Cloud & Cyber Security Engineering +Ai

Duration
12 months
Delivery
Blended
Total learning
1,240 hours

Career Outcomes

Career Opportunities & Progression

  • Junior Cloud Engineer
  • Junior Network Engineer
  • Systems Administrator
  • Azure Administrator
  • AWS Cloud Support Associate
  • Microsoft 365 Administrator

Before you apply

Your programme at a glance

Apply / enquire
Qualification
Diploma (non-NVQ)
Awarding institution
NextGen Campus · Academic Transcript
Duration
One year (50 teaching weeks)
Delivery
Blended learning – instructor-led lectures and guided practicals, NextGen LMS laboratories and a physical capstone
Class schedule
Saturday 1.30 PM – 5.30 PM - Sunday 9.00 AM – 5.00 PM
Lecture / guided learning
600 hours – instructor-led
LMS laboratory hours
480 hours – practical labs via the NextGen LMS
Student Project Book
120 hours – including the Management Module
Modules
14 taught modules
Entry requirements
G.C.E. O/L with Mathematics and English passes, or equivalent, plus basic computer literacy. No prior networking experience is required.
Next intake
Confirm available batches with admissions

Class schedules follow the syllabus; confirm the batch timetable with admissions.

Complete Programme Map

Course Content Architecture

14 modules across 5 learning phases. Select a module to read its full curriculum.

14Taught modules
5Learning phases
68Syllabus topics
10Career directions
One year (50 teaching weeks)Programme duration
NextGen CampusAwarding institution
03 · Hands-on practice
Build and troubleshoot a workstationBuild multi-switch and multi-router networksBuild a Hyper-V hostBuild a domain with an additional DCDeploy a firewall, proxy and VPNDeploy first Azure resourcesDeploy a secured Azure environmentAutopilot-deploy and secure a device

Guided laboratories, practical activities and a Student Project Book build evidence of your learning.

04 · Project, portfolio & progression
Professional portfolioDocumented laboratories, project evidence and the Management Module
Career directionsJunior Cloud Engineer · Junior Network Engineer · Systems Administrator · Azure Administrator · AWS Cloud Support Associate
Further opportunitiesMicrosoft 365 Administrator · Endpoint Administrator · Cloud Security Support Engineer · SOC Analyst · Infrastructure and Disaster Recovery Support Engineer
DeliveryBlended learning – instructor-led lectures and guided practicals, NextGen LMS laboratories and a physical capstone
AssessmentContinuous assessment, practical work, final project and Student Project Book
CompletionNextGen Campus qualification and Academic Transcript on successful completion

14 modules · Full syllabus

Complete Curriculum

Explore every phase of the programme, then expand the modules below for the complete syllabus, outcomes and practical work.

Phase 1 — Infrastructure & Network Foundations

M01IT Support & Infrastructure Operations +Ai30 lecture h · 20 lab h

Builds the IT-support and infrastructure foundation — hardware, operating systems, the service desk, and TCP/IP networking basics — that every later module builds on.

Syllabus Content

  • Hardware and OS installation
  • Troubleshooting and ticketing
  • TCP/IP and IP addressing
  • DNS and routing basics
  • Professional communication

Learning Outcomes

  • Support hardware, operating systems and users professionally
  • Explain TCP/IP, IP addressing and core services
  • Work the service-desk ticket lifecycle

LMS Laboratories

  • Build and troubleshoot a workstation
  • Resolve service-desk tickets

AI Integration

  • Copilot-assisted knowledge-base articles

Syllabus alignment: CompTIA A+ / Network+ foundations

M02Cisco CCNA 200-301 Network Engineering +Ai60 lecture h · 50 lab h

Delivers the full Cisco CCNA 200-301 pathway — addressing, switching, routing, security and automation — the networking core of the diploma.

Syllabus Content

  • IPv4/IPv6 and subnetting
  • VLANs, STP and EtherChannel
  • OSPF and static routing
  • NAT, DHCP and IP services
  • ACLs, SSH and AAA
  • Automation and REST APIs

Learning Outcomes

  • Configure VLANs, trunking and inter-VLAN routing
  • Configure OSPF, NAT, DHCP and ACLs
  • Secure and automate Cisco devices

LMS Laboratories

  • Build multi-switch and multi-router networks
  • Secure devices and validate with show commands

AI Integration

  • AI review of Cisco configurations

Syllabus alignment: Cisco CCNA 200-301

M03Virtualisation Infrastructure +Ai20 lecture h · 15 lab h

Builds virtualisation skills on VMware and Hyper-V — the platform for the servers built later.

Syllabus Content

  • Hypervisors
  • VMware ESXi and vCenter
  • Hyper-V
  • Virtual switches and storage
  • Snapshots and templates

Learning Outcomes

  • Deploy VMs on VMware ESXi and Hyper-V
  • Configure virtual switches, datastores and snapshots
  • Explain HA and live migration

LMS Laboratories

  • Build a Hyper-V host
  • Deploy VMs from templates

AI Integration

  • AI-generated PowerShell for Hyper-V

Syllabus alignment: VMware / AZ-800 (Hyper- V)

M04Windows Server Infrastructure & Migration +Ai60 lecture h · 50 lab h

Develops Windows Server infrastructure end to end — AD, DNS, DHCP, Group Policy, file, WSUS, WDS and RDS — plus a structured domain migration.

Syllabus Content

  • AD DS, DNS, DHCP
  • OUs and Group Policy
  • File and print services
  • WSUS and WDS
  • Remote Desktop Services
  • Domain migration and FSMO roles

Learning Outcomes

  • Deploy AD DS, DNS and DHCP with resilience
  • Design OUs and Group Policy; configure file, WSUS, WDS and RDS
  • Plan and execute a domain migration

LMS Laboratories

  • Build a domain with an additional DC
  • Deploy WSUS/WDS
  • Migrate a domain to Windows Server 2025

AI Integration

  • AI-generated PowerShell for AD

Syllabus alignment: AZ-800 / AZ-801 Windows Server Hybrid

M05Network Security & Cloud Email Security +Ai30 lecture h · 25 lab h

Secures the network and email — firewalls, IDS/IPS, VPNs, and email security with SPF, DKIM and DMARC.

Syllabus Content

  • Network-security principles and Zero Trust
  • Firewalls and web proxy
  • IDS/IPS
  • VPNs and encryption
  • Cloud email security

Learning Outcomes

  • Design firewall policy and deploy a VPN
  • Configure IDS/IPS
  • Secure email with SPF, DKIM and DMARC

LMS Laboratories

  • Deploy a firewall, proxy and VPN
  • Configure email authentication

AI Integration

  • AI-assisted firewall rule review

Syllabus alignment: CompTIA Security+

Phase 2 — Microsoft Cloud Engineering

M06Cloud Fundamentals: Azure & Microsoft 365 +Ai30 lecture h · 15 lab h

Introduces the Microsoft cloud — Azure fundamentals (AZ-900) and Microsoft 365 fundamentals — as the base for the cloud-engineering phase.

Syllabus Content

  • Cloud concepts
  • Azure architecture and services
  • Cost and governance (AZ-900)
  • Microsoft 365 services and licensing

Learning Outcomes

  • Describe Azure architecture, services and pricing
  • Describe Microsoft 365 services and licensing
  • Apply the shared responsibility model

LMS Laboratories

  • Deploy first Azure resources
  • Tour the Microsoft 365 admin center

AI Integration

  • Copilot in Azure overview

Syllabus alignment: AZ-900 · Microsoft 365 fundamentals

M07Azure Administration & Hybrid Infrastructure +Ai60 lecture h · 50 lab h

Builds Azure administration and hybrid infrastructure (AZ-104) — identity, compute, storage, networking, monitoring and hybrid connectivity.

Syllabus Content

  • Entra ID and RBAC
  • VMs, App Service and storage
  • Virtual networking and hybrid connectivity
  • Monitoring and backup (AZ-104)

Learning Outcomes

  • Manage Entra identity, RBAC and governance
  • Deploy compute, storage and virtual networks
  • Connect on-premises to Azure; monitor and back up

LMS Laboratories

  • Deploy a secured Azure environment
  • Build a site-to-site VPN to Azure

AI Integration

  • Copilot in Azure; AI-assisted KQL

Syllabus alignment: AZ-104 Azure Administrator

M08Microsoft 365, Intune & Endpoint Administration +Ai50 lecture h · 40 lab h

Administers the modern workplace — Windows endpoints with Intune and Autopilot (MD-102) and Microsoft 365 with Copilot and agents (AB-650).

Syllabus Content

  • Endpoint enrolment, Autopilot, compliance and apps (MD-102)
  • Microsoft 365 tenant, Exchange, SharePoint, Teams (AB-650)
  • Purview protection
  • Microsoft 365 Copilot readiness and agent governance
  • Hybrid identity with Entra Connect

Learning Outcomes

  • Enrol and manage Windows endpoints with Intune and Autopilot (MD-102)
  • Configure Microsoft 365 tenants, workloads and governance (AB-650)
  • Enable and govern Microsoft 365 Copilot and agents

LMS Laboratories

  • Autopilot-deploy and secure a device
  • Configure a tenant and Copilot readiness
  • Govern an agent

AI Integration

  • Microsoft 365 Copilot administration; AI-assisted Intune troubleshooting

Syllabus alignment: MD-102 Endpoint Administrator · AB-650 M365 & AI Services

M09Cloud Security Engineering +Ai45 lecture h · 40 lab h

Engineers cloud security — identity protection, Defender for Cloud, Key Vault, Purview and Microsoft Sentinel.

Syllabus Content

  • PIM and Conditional Access
  • Defender for Cloud and secure score
  • Key Vault and data security
  • Microsoft Sentinel and KQL

Learning Outcomes

  • Secure identity with PIM and Conditional Access
  • Raise posture with Defender for Cloud
  • Detect and respond with Sentinel

LMS Laboratories

  • Harden an Azure workload
  • Build Sentinel detections

AI Integration

  • AI-assisted KQL and incident summaries

Syllabus alignment: SC-900 · AZ-500 / SC-500 pathway

Phase 3 — Multi-Cloud with AWS

M10Amazon Web Services Engineering +Ai50 lecture h · 45 lab h

Builds AWS engineering skills — IAM, VPC, EC2, storage, databases and resilient architecture — for true multi-cloud work.

Syllabus Content

  • AWS global infrastructure
  • IAM and VPC
  • EC2 and storage
  • RDS and resilient design
  • Azure–AWS mapping

Learning Outcomes

  • Configure IAM, VPC and EC2
  • Deploy S3, RDS, load balancing and auto scaling
  • Map Azure services to AWS

LMS Laboratories

  • Build a secure AWS VPC and workload
  • Design a highly available architecture

AI Integration

  • Amazon Q for configuration help

Syllabus alignment: AWS CLF-C02 · SAA-C03

Phase 4 — Cyber-Security Engineering & Operations

M11Ethical Security Assessment +Ai60 lecture h · 50 lab h

Develops authorised ethical security assessment — reconnaissance, scanning, exploitation and web-application testing — inside an isolated lab.

Syllabus Content

  • Ethics, law and scope
  • OSINT and reconnaissance
  • Scanning and enumeration
  • Exploitation and web testing
  • Reporting

Learning Outcomes

  • Plan an authorised assessment
  • Scan, enumerate and assess vulnerabilities
  • Exploit and report safely

LMS Laboratories

  • Assess an isolated lab environment
  • Write an assessment report

AI Integration

  • AI-assisted vulnerability triage, verified

Syllabus alignment: CEH · PenTest+

M12Cyber-Security Operations +Ai45 lecture h · 40 lab h

Builds defensive cyber-security operations — hardening, firewalls, IDS/IPS, web and endpoint security, and phishing and malware defence.

Syllabus Content

  • Traffic analysis
  • Firewalls and IDS/IPS
  • Hardening and IAM
  • Web-application security
  • Phishing and malware defence

Learning Outcomes

  • Harden systems and networks
  • Operate IDS/IPS and firewalls
  • Defend against phishing and malware

LMS Laboratories

  • Tune IDS and harden a server
  • Run a phishing simulation

AI Integration

  • AI-assisted event correlation

Syllabus alignment: CompTIA Security+ / CySA+

M13SOC & Incident Response +Ai35 lecture h · 30 lab h

Builds SOC and incident-response skills — SIEM, log analysis, the incident lifecycle and digital forensics.

Syllabus Content

  • SOC operations and SIEM
  • Log analysis
  • Incident response (NIST SP 800-61)
  • Digital forensics

Learning Outcomes

  • Operate a SIEM and analyse logs
  • Run the incident-response lifecycle
  • Preserve and analyse evidence

LMS Laboratories

  • Investigate a simulated incident
  • Preserve and analyse evidence

AI Integration

  • AI-assisted incident timelines

Syllabus alignment: CySA+ · SC-200

Phase 5 — AI for Engineers

M14Artificial Intelligence for Engineers25 lecture h · 10 lab h

Applies AI across engineering and security — Microsoft 365 Copilot and agents, Azure AI, AI in cyber security, and responsible AI.

Syllabus Content

  • AI for engineers
  • Microsoft 365 Copilot and Copilot Studio (AB-900)
  • Azure AI (AI-901)
  • AI in cyber security
  • Responsible AI and PDPA

Learning Outcomes

  • Administer Microsoft 365 Copilot and agents
  • Build with Azure AI
  • Use AI in security responsibly

LMS Laboratories

  • Build a grounded AI assistant
  • Use Security Copilot and verify output

AI Integration

  • The dedicated AI module

Syllabus alignment: AB-900 · AI-901

Industry certification alignment is syllabus guidance. External examinations are separate; course completion does not award vendor certification.

Learning outcomes

Skills You Will Develop

  • Support users, hardware and operating systems professionally.
  • Design, configure and troubleshoot enterprise networks to CCNA level.
  • Build virtualised Windows Server infrastructure, including migration.
  • Administer Microsoft Azure (AZ-104), and Microsoft 365 and Windows endpoints with Intune and Copilot (MD-102 and AB- 650).
  • Engineer cloud security with Entra ID, Defender, Purview and Sentinel.
  • Design and deploy resilient AWS solutions and map services across clouds.
  • Perform authorised ethical security assessments and report findings.
  • Operate defensive controls, SIEM, incident response and forensics.
  • Apply AI tools, Copilot and agents responsibly in engineering and security.

Career Outcomes

Career Opportunities

Junior Cloud EngineerJunior Network EngineerSystems AdministratorAzure AdministratorAWS Cloud Support AssociateMicrosoft 365 AdministratorEndpoint AdministratorCloud Security Support EngineerSOC AnalystInfrastructure and Disaster Recovery Support Engineer

Potential roles to work towards, depending on your practical portfolio, experience and employer requirements. Some roles require further training or certification.

Tools & Platforms

Technologies used

  • Cisco networking
  • Windows Server
  • Microsoft Azure and Microsoft 365
  • Intune and Copilot
  • Entra ID, Defender, Purview and Sentinel
  • AWS

Labs & practicals

How you will learn

  • Live online teaching with scheduled on-campus practical sessions
  • LMS module labs with trainer feedback
  • A Student Project Book documenting your learning
  • A final project, presentation and practical assessment

Admission requirements

Before you start

G.C.E. O/L with Mathematics and English passes, or equivalent, plus basic computer literacy. No prior networking experience is required.

You will need a computer and reliable internet for online classes and LMS activities.

NextGen Campus support

Student support

  • Academic guidance from your course coordinator
  • Trainer feedback on LMS laboratory work
  • Project planning and documentation support
  • LMS help for login and technical questions

Put your learning into practice

Projects & assessment

Build and defend an enterprise reference network connecting a Head Office, Disaster Recovery site and Azure. Develop the system throughout the year and present it across five physical capstone days.

Capstone final project
45%
Continuous assessment
35%
Student Project Book
20%

Complete the required practical work and project submissions. The handbook sets out attendance, pass requirements, grading and re-sit arrangements.

Capstone Project — 40 Hours (Physical)

NextGen Enterprise Reference Network — Final Project (V1.9)

The diploma is anchored by one major final project: the NextGen Campus enterprise reference network (Final Project V1.9). It has a Head Office (HO) site behind a proxy/firewall, a Disaster-Recovery (DR) site with a replica domain controller, and a Microsoft Azure site connected by a site-to-site VPN. The HO site runs the full server estate from the architecture diagram — domain controller (AD/DNS), additional domain controller, file server, SCCM, DHCP, WDS, WSUS, SQL database server, Exchange, a member domain controller, an endpoint-protection (COP/Virus Guard) server, a backup server, a VPN server, core and access switching and wireless. Learners build this environment progressively through the year, then defend it against a simulated external hacker in an attack-and-defend exercise. The 40-hour capstone is delivered over five physical poya days at the NextGen Campus Head Office, Nugegoda, each scheduled after the phase it builds on, with the panel defence on the final day. Weekly capstone tasks in the Project Book feed the build all year.

Capstone Deliverables

  • Enterprise architecture diagram and IP plan (HO, DR and Azure)
  • Working HO network: switching, routing, VLANs, wireless and proxy/firewall
  • Full HO server estate and a DR-site replica domain controller
  • Azure site with a working site-to-site VPN, plus Microsoft 365, endpoint and AWS integration
  • Security hardening across the estate and evidence from the external-hacker attack-and-defend exercise
  • DR failover and backup-restore test results, cost/DR plan and full documentation
  • Panel presentation and technical defence of the complete enterprise network

Student Project Book & Management Module

The Student Project Book is a guided professional record developed throughout the year (about 2.4 hours a week). It documents laboratory work, design decisions and project outcomes, and contains the seven-unit Management Module.

    Payment Options

    Choose how you pay

    Total course feeLKR 120,000Course tuition
    Speak to admissions

    Installment arrangements

    Confirm whether an installment plan is available for your intake, including the initial payment, installment amounts and due dates.

    Discuss payment options
    Registration feeLKR 3,000 (one-time)
    • Lecturer-led learning and guided practical work
    • LMS laboratories and Student Project Book
    • Programme project and assessment

    Course tuition and the one-time registration fee are listed separately. Confirm payment dates and installment availability with admissions. External professional certification examination fees are separate unless NextGen Campus specifically states otherwise.

    Need Payment Guidance?

    Having trouble choosing the right payment option?

    Please talk to our Education Consultant for payment guidance, installment availability and registration support.

    Talk to Our Education Advisor

    Your next step

    Request intake, fees and registration guidance.