0/8 lessons
Journal
7 September 2026·50 min readCareer changePortfolioCloud & AIUK data

Foundations of Portfolio Craft in 2026

By Esperance Brooks7 September 2026

Everyone tells you to “build a portfolio.” Almost no one tells you what a 2026 hiring manager is actually scanning for. This guide does — and it's built on real UK labour-market data, not vibes. It works like a course: eight lessons, interactive checks, and your progress saves in your browser as you go.

Name it

You've collected the certifications. You've built the tutorial projects. You've pressed “Easy Apply” more times than you want to admit — and the replies are either silence or a rejection you can set your watch by. It's starting to feel personal. It isn't. You're competing in a market that quietly changed the rules, and no one sent you the memo.

Here's the memo. If you're job-hunting for a Cloud + AI role in the UK right now, the winning move is not to look more impressive than the other 200 applicants. It's to look less risky to hire. Those are completely different games — and almost everyone is playing the wrong one. Why does “less risky” matter so much more in 2026? Because the market genuinely tightened, and hiring managers are drowning:

−14%
UK hiring, year-on-year, April 2026 — every tracked industry in decline
DSIT / Skills England
−27%
Entry-level Software Engineer hiring, year-on-year
DSIT snapshot
180k
UK specialist AI job postings in 2025 — up 61% on the year
PwC AI Jobs Barometer
78%
Candidates now use AI to tailor their CV / application
Greenhouse 2026

Read those together and the strategy writes itself. Overall hiring is down and entry-level is down hardest — so competition per role is brutal. But specialist AI demand is surging — so opportunity is real, it's just concentrating around people who can prove operational capability. And because 78% of applicants now generate polished applications with AI, polish is no longer a signal. Evidence is.

The one question to build around

“How do I make myself look less risky to hire than the other 200 applicants?” Every lesson here is one answer to that question.

Lesson 01 — Stop calling yourself “Cloud & AI”

“Cloud & AI” feels safe because it's broad. That breadth is exactly the problem. A hiring manager scanning 200 CVs isn't looking for someone who touches everything — they're looking for someone who reduces a specific risk on a specific team. Broad reads as unfocused. Unfocused reads as risky. So choose an intersection employers are already buying. The strongest one right now:

Cloud AI Engineer / AI Platform Engineer — “I build and operate production AI systems on AWS: from APIs and RAG to infrastructure, observability, security and cost.”

Why this one? Because the data points straight at it. Specialist AI postings hit 180,000 in the UK in 2025, up 61% year-on-year, even as overall hiring fell [2]. And current UK “AI Platform Engineer” roles don't ask for “AI” as a separate skill — they explicitly fuse Cloud Engineering + DevOps + AI Engineering into one job. That convergence is your opening: most candidates are trained to think of these as three separate careers.

The recurring requirement stack — tick what you can defend

Pull 30 real UK postings and the same words keep surfacing. Tick every one you can already defend in a conversation — not just “have heard of.” It saves as you go.

Tick what you can defend under questioning — it saves as you go.

Question to sit with: which one intersection would you be proud to be known for?

Lesson 02 — Build two projects, not ten

Ten shallow projects say “I follow tutorials.” Two deep ones say “I can operate systems.” And operating is exactly the proxy employers are missing: in the UK's AI Labour Market Survey, 35% of organisations reported at least one hard-to-fill AI vacancy — and the top two reasons were candidates lacking work experience (31%) and lacking technical skills (30%) [3].

The reframe that changes everything

You can't manufacture a job title. You CAN manufacture the behaviours that “work experience” is a proxy for. Build projects that force you to make trade-offs, operate something, secure it, and take responsibility when it breaks. That's not a portfolio — that's evidence.

Project 1 — a production GenAI system

Frontend → API Gateway → FastAPI/Lambda → Bedrock → RAG → OpenSearch → S3

Version one is the happy path — and it's where most candidates stop, which is where hiring managers get bored. The value is in what you add next, then in what you deliberately break. Layer on the operational reality: authentication, IAM least-privilege, PII handling, prompt-injection protection, an evaluation dataset, retrieval metrics, hallucination monitoring, tracing, latency and token/cost monitoring, Terraform, CI/CD, load testing, failure handling, and written architecture decisions with a rollback strategy. Then attack your own system and document what happens:

Project 2 — an AI platform / infrastructure play

Example: a self-service AI deployment platform that lets a developer ship an AI service with Terraform, EKS/ECS, GitHub Actions, secrets management, model-endpoint config, observability, security scanning, environment separation, budget controls, rollback, and evaluation gates. Why two projects of this shape? Because together they let you credibly apply across a whole ladder of titles with one body of evidence:

Cloud Engineer → Platform Engineer → DevOps Engineer → AI Platform Engineer → Cloud AI Engineer

Question to sit with: would this project survive a hiring manager asking “show me where it breaks”?

Lesson 03 — The evidence pack

This is where you out-work almost everyone. Most GitHub repos say one thing: “Built an AI app using AWS Bedrock.” That tells a hiring manager nothing about how you THINK. An evidence pack lets them inspect your thinking without ever interviewing you. It matters more every month: Skills England's 2026 assessment describes digital work shifting “away from routine coding and testing tasks toward oversight, verification, judgement, and communication” [4]. An evidence pack is judgement, made visible. Expand each folder:

/README.md — not “what it does”
Problem → constraints → architecture → decisions → results. A reviewer should understand your thinking in 90 seconds. Lead with the business problem, not the tech.
/architecture
Diagrams of the real system — including the failure paths from Lesson 2. A picture of how it degrades is rarer and more impressive than a picture of the happy path.
/adrs — architecture decision records
ADR-001 Why Lambda instead of ECS ADR-002 Why OpenSearch instead of pgvector ADR-003 Why asynchronous ingestion ADR-004 Why this model Each ADR answers “why not the obvious alternative?” — the exact question you'll get in interview (Lesson 7).
/operations
runbook.md · incident-response.md · disaster-recovery.md · monitoring.md Almost no junior candidate has these. Having them says “I've thought past the demo.”
/security
threat-model.md · iam-design.md · data-classification.md Especially powerful if you're targeting regulated sectors (Lesson 6).
/cost
An actual monthly estimate plus the optimisation decisions behind it. Employers now hire for cost-awareness explicitly — talking money fluently is a differentiator.
/tests — not just unit tests
Retrieval evaluation, prompt tests, security tests, infrastructure tests, load tests. This is what “I can operate this” looks like on disk.

Not sure your repo would survive this review?

A written Orientation Plan tells you exactly which folder to build first — free, reviewed personally, delivered within 48 hours.

Question to sit with: can a stranger see how I think without asking me a single question?

Lesson 04 — Get unusually good at one “boring” thing

Everyone is learning the shiny stuff: agents, RAG, prompt engineering. Learn those too — but they won't differentiate you, because everyone has them. What differentiates you is being excellent at something companies only discover they need AFTER the demo works. The data backs this precisely: Lightcast's analysis of AI postings found the fastest-rising requirements aren't model-building — they're operational maturity: cross-functional collaboration, operational excellence, AI infrastructure, and “trustworthiness” (responsible, safe AI), which carries a salary premium [5]. Pick one lane and go deep:

  • AI observability & evaluation — answer the question every team is quietly failing to answer: “how do we know this is actually getting better?” Golden datasets, retrieval precision/recall, answer-quality evaluation, prompt versioning, tracing, regression tests.
  • AI security — the lane regulated sectors pay a premium for. Prompt injection, data leakage, tenant isolation, guardrails, IAM, secrets, auditability.
  • GenAI FinOps — because every AI system quietly becomes a cost problem. Model routing, caching, token budgets, latency/cost trade-offs, provisioned vs on-demand.

Which lane fits you? (pick one — it saves)

Question to sit with: what will people eventually come to me specifically for?

Lesson 05 — Certifications are evidence, not the headline

This one's delicate, because certifications took real work — and they matter. But look at how current UK platform-engineering postings order things: hands-on Terraform, Kubernetes, CI/CD, AWS implementation, autonomous delivery and client communication come FIRST. Certifications sit in the “nice to have” section. That ordering is a signal about how to write your own CV.

What most CVs lead with: “AWS Certified × 7.”

What a de-risking CV leads with: “Cloud / AI Engineer — AWS, Python, Terraform, Bedrock. Built an event-driven GenAI platform supporting RAG, automated evaluation and multi-tenant document retrieval; implemented IaC, CI/CD, IAM isolation and cost/latency monitoring.” Then certifications appear — as proof backing the claim, not as the claim itself.

The trap to avoid

Collecting a sixth certification because you feel insecure is motion, not progress. Certifications prove you can pass a structured exam. Evidence packs prove you can operate an unstructured system. In 2026, the second is the scarcer signal.

Question to sit with: does my CV's first line describe what I can DO, or just what I've PASSED?

Lesson 06 — Target and apply differently

Where the roles actually are

Don't default to famous companies — that's where the 200-applicant queues form. LinkedIn's 2026 labour-market analysis found hiring at firms with 1–10 employees is up 44% versus 2019, even while overall UK hiring sits below pre-pandemic levels [6]. Small and mid-size builders are where a versatile Cloud+AI person is genuinely scarce. Three buckets: AI and cloud consultancies (constant need for builders who can also talk to clients); SaaS and startups adopting AI (need one hire who crosses software, cloud and AI); and non-AI companies adopting AI — insurance, FinTech, healthcare, logistics, retail, legal — where there's far less competition from pure AI specialists. They don't need another ML researcher; they need someone who can integrate AI safely into systems they already run.

How to apply — trade 100 hopeful for 15 deliberate

Application volume has exploded, and AI made every application look alike: 78% of candidates now use AI to tailor their CV [7]. Sending more polished-but-generic applications is pouring water into a flood. Do the opposite — go from 100 Easy Applies to 10–15 genuinely targeted ones, each following five steps:

“I saw you're building out your GenAI platform and specifically mentioned RAG evaluation and AWS. I've been working on a similar problem around retrieval evaluation and Bedrock — I documented the architecture and some of the trade-offs here. Your role caught my attention because of X.”

a message that earns a reply

Referrals: the least glamorous, most effective lever

This isn't “networking is nice.” A landmark NBER field-experiment study found referred candidates were more likely to be hired even after controlling for observable characteristics [8]. So your networking goal isn't 10,000 connections — it's 50 Cloud/AI engineers who genuinely know what you can build. Discuss architecture, review their work, ask good questions, share experiments. Then when their company needs someone who understands AWS and GenAI, someone thinks of you. And make your LinkedIn content the evidence: don't post “5 AWS services to learn” — document decisions. “I cut retrieval latency 1.8s to 740ms — here's what actually worked.” “I deliberately killed one component of my architecture — here's what broke.”

Question to sit with: do 50 people in my field know what I can actually build?

Lesson 07 — Interview for trade-offs

Stop rehearsing “What is DynamoDB?” — a search engine answers that. Start rehearsing “Why DynamoDB rather than Aurora?” Trade-off questions are where interviews are actually won, and where your evidence pack does the heavy lifting. Flip each card and rehearse your real answer out loud:

Manufacture evidence of communication

Both Lightcast and Skills England flag communication and cross-functional collaboration as fast-rising in AI roles [4][5]. Record five-minute videos explaining your architecture — not tutorials. Frame it: “You are my CTO. Here is why I designed the system this way.” One architecture, one business problem, one cost discussion, one security discussion.

Question to sit with: can I defend every architecture choice — and name what would change it?

Lesson 08 — Your 90-day plan

Knowledge you don't act on is just anxiety with extra steps. Here's the whole guide compressed into a plan you can start this week. Tick items off — it saves — and watch the bar fill.

Month 1 — Positioning

Month 2 — Proof

Month 3 — Distribution (repeat weekly)

What you'll deliberately NOT do

Collect a sixth certification out of insecurity. Build another Netflix clone or “ChatGPT for your PDF.” List 47 AWS services under Skills. Brand yourself “Cloud | DevOps | Cyber | AI | ML | Data.” Compete with AI-generated CVs by generating an even more generic one. Polish is now a commodity. Evidence is not.

Question to sit with: what is the one thing I'll do in the next 48 hours?

The candidate who wins now

Not the person who knows the most AWS services. Not the person with the most certificates. Increasingly, not even the person who codes fastest — because AI is absorbing routine production work, and, as Skills England puts it, the value is moving toward oversight, verification, judgement and accountability [4].

“Give me an unclear business problem. I can design something. Build it. Deploy it. Secure it. Observe it. Control its cost. Explain my decisions. And take responsibility for what happens in production.”

That's the profile the UK data keeps pointing at — and it's a profile you can build on purpose, starting this week.

You've got the map. Want the plan built around you?

This guide gives everyone the same foundations. What it can't do is look at your specific background, your gaps, and your target roles — and tell you exactly what to build first, in what order, this week. That's the free Orientation Plan: a written, personalised plan you own, reviewed personally and delivered within 48 hours. No card required.

Sources & data notes

Every statistic above was checked against its primary source in September 2026. Two figures that circulate widely online were found misattributed to GOV.UK; they're corrected below and cited to their real owners. Only published summary statistics are quoted, with attribution.

  1. [1]UK hiring −14% YoY (April 2026); entry-level Software Engineer −27%. DSIT / Skills England, “A snapshot of entry-level hiring in the UK.” Open Government Licence v3.0. gov.uk/government/publications/entry-level-hiring-in-the-uk-verified
  2. [2]180,000 UK specialist AI postings in 2025, up 61% YoY. Widely misattributed to GOV.UK — the real source is PwC's AI Jobs Barometer 2026. pwc.co.uk/press-room/press-releases/research-commentary/2026verified
  3. [3]35% of organisations had at least one hard-to-fill AI vacancy; top reasons: lack of work experience (31%), insufficient technical skills (30%). DSIT, AI Labour Market Survey 2025. gov.uk/government/publications/ai-labour-market-survey-2025-verified
  4. [4]Digital work shifting “away from routine coding and testing tasks toward oversight, verification, judgement, and communication.” Skills England, Sector Skills Needs Assessment — Digital and Technologies (June 2026). gov.uk/government/publications/skills-england-annual-skills-verified
  5. [5]Fastest-rising AI-job skills: cross-functional collaboration, operational excellence, AI infrastructure, and “trustworthiness” (with a salary premium). Lightcast, “Emerging skills in AI jobs.” lightcast.io/resources/blog/emerging-skills-in-ai-jobsverified
  6. [6]Hiring at firms with 1–10 employees up 44% vs 2019. LinkedIn UK/EU labour-market analysis, 2026 (Economic Graph). news.linkedin.com/2026/eu-hiring-and-growth-2026verified
  7. [7]78% of candidates use AI to tailor their CV / application (UK, Ireland, Germany). Greenhouse, 2026 AI in Hiring Report. greenhouse.com/uk/guidance/the-2026-ai-in-hiring-reportverified
  8. [8]Referred candidates are more likely to be hired even after controlling for observables. Burks, Cowgill, Hoffman & Housman, NBER Working Paper 21357. nber.org/papers/w21357verified

Want the plan we're describing here? Start with your free Orientation Plan — same three-tier grounding, same standard, no shortcuts.

MORE FROM THE JOURNAL