Do you qualify?
Cloud engineering falls under ISCO-08 group 2519 (Software and applications developers NEC), 2522 (Systems administrators), or 2523 (Computer network professionals) — all within sub-major group 25, a shortage occupation in Germany. The classification depends on whether the role is design-led (2519), operations-led (2522), or network-architecture-led (2523). All three are shortage occupations at the same threshold. You need:
- A job offer in Germany for at least 6 months
- A gross annual salary of at least €45,934.20 (2026 shortage threshold)
- A recognised degree, or 3 years of cloud engineering experience at university level in the last 7 years
Degree recognition for Moroccan qualifications
The Diplôme d'Ingénieur d'État (5 years, ISCED 7) in Réseaux & Systèmes, Génie Informatique, or Génie Électrique with cloud and data-centre modules is the standard qualifying credential:
- INPT: cloud/virtualisation is explicitly in the Advanced Software Engineering for Digital Services filière
- EMI: Génie Électrique includes data-centre infrastructure; Génie Informatique covers distributed systems
- ENSA Oujda: Data Sciences & Cloud Computing filière — directly relevant
- ENSIAS: Génie Logiciel and IWIM with cloud deployment modules
"Cloud engineer" does not appear on any Moroccan diploma — the consulate and Federal Employment Agency assess whether the underlying Réseaux/Systèmes/Informatique engineering degree matches the job description in the offer. The Erklärung zum Beschäftigungsverhältnis should describe the role in infrastructure engineering terms: multi-region architecture, IaC design, FinOps, and security posture decisions.
Check your institution and programme at anabin.kmk.org — institution must be H+ and your programme listed as "entspricht" or "gleichwertig".
A 3-year Licence LMD in Informatique or Réseaux at ISCED 6 may qualify for Route 1 in principle, but most Moroccan cloud engineers with only a Licence LMD use the § 18g(2) IT exception instead.
Salary threshold (2026)
| Category | Gross annual minimum |
|---|---|
| Cloud engineer (shortage, ISCO-08 group 25) | €45,934.20 |
| General Blue Card threshold | €50,700 |
| IT exception without degree (§ 18g(2)) | €45,934.20 |
Two routes to the Blue Card
Route 1 — degree: Diplôme d'Ingénieur from an H+ institution with the Réseaux, Systèmes, or Génie Informatique programme listed.
Route 2 — IT exception (§ 18g(2)): 3 of the last 7 years of cloud engineering at university level. Experience letters must describe infrastructure design decisions (multi-AZ/multi-region architecture, IaC authorship, capacity planning, cost optimisation, security architecture) — not only operational tasks (provisioning, monitoring, patch management).
Cloud certifications (AWS Solutions Architect Professional, Azure Expert, GCP Professional Cloud Architect) do not substitute for a degree or for the 3-of-7-years experience requirement. They are supporting evidence of technical depth, not qualifying credentials under either route.
Worked example: Rachid's Blue Card application
Rachid Amrani, 34, cloud engineer, Casablanca to Düsseldorf
Diplôme d'Ingénieur from EMI (Génie Informatique, 2014). Confirms EMI and his programme in anabin before applying. Apostille from Moroccan MFA on degree and transcript. Registered address in Casablanca — applies at the Consulate General Casablanca.
Ten years of experience: 3 years at a Moroccan ISP managing on-premise Linux infrastructure, then 7 years building cloud platforms — migrated a 200-service monolith to AWS microservices (ECS, RDS Aurora, CloudFront, Route 53), authored all Terraform modules, implemented FinOps dashboard cutting cloud spend by 28%. Holds AWS Solutions Architect Professional and CKA (supporting evidence only).
Job offer: Senior Cloud Engineer at a Düsseldorf logistics holding, €65,000 gross/year. Outcome: qualifies under Route 1. Settlement permit at 21 months with German B1.
Document checklist
Route 1:
- Passport (at least 2 empty pages)
- Degree certificate with Moroccan MFA apostille
- Academic transcript with Moroccan MFA apostille
- anabin printout or ZAB Statement of Comparability
- Erklärung zum Beschäftigungsverhältnis
- Health insurance confirmation
Route 2:
- Experience letters (IaC tools: Terraform/Pulumi/CDK; cloud platforms: AWS/GCP/Azure; architecture decisions, multi-region design, cost optimisation, security posture; seniority level) and payslips. Cloud certifications as attachments — supporting evidence only.
Which German mission handles your application
Embassy Rabat and Consulate General Casablanca both handle employment visas. Jurisdiction follows your registered address. Confirm before booking via digital.diplo.de.
After approval: settlement permit timeline
- 21 months Blue Card + German B1 → settlement permit (§ 18c(2) AufenthG)
- 27 months Blue Card + German A1 → settlement permit
Common mistakes
Listing certifications as the primary credential. AWS SAP, Azure Expert, and GCP Pro Cloud Architect are not degree equivalents and do not count toward the § 18g(2) experience requirement. They help, but only as supporting evidence.
Experience letters focused on provisioning and monitoring. Provisioning servers and monitoring dashboards is operations work. "Designed a multi-region active-passive failover architecture with a 99.95% SLA target using AWS Route 53 health checks, Aurora Global Database, and cross-region S3 replication" is engineering design. Rewrite to describe decisions, not tasks.
Mis-classifying a network operations role as cloud engineering. If your role is primarily network administration (routers, switches, firewall rules), it may fall under 2523 (Computer network professionals) or even outside group 25. Confirm with the job description that the role is cloud infrastructure design, not network operations.
When you need a lawyer
Consider one if your programme is unlisted in anabin, if your experience is primarily operational rather than design-led, or if the ISCO-08 classification of your specific role is ambiguous (boundary between 2519, 2522, and 2523).
We are not a law firm and this page does not constitute legal advice.
Frequently asked questions
Which ISCO-08 group is cloud engineer? 2519 for design-led and platform engineering roles; 2522 for systems/cloud administration; 2523 for network architecture. All are sub-major group 25 shortage occupations at the €45,934.20 threshold. The job description in your offer drives the classification.
Do AWS or Azure certifications count toward § 18g(2)? No. They are evidence of skill level but are not counted as employment experience. The 3-of-7-years requirement refers to actual employment in IT roles at university level — not training or certification study.
My Licence LMD en Réseaux is from a public Moroccan university. Does it qualify? Potentially yes, at ISCED 6, if the institution is H+ and the programme appears in anabin. Verify both conditions before applying. If the programme is unlisted, get a ZAB Statement of Comparability or use § 18g(2) if you have sufficient experience.
Sources
- § 18g AufenthG, Bundesministerium der Justiz
- EU Blue Card: Make it in Germany
- anabin database, KMK / ZAB
- German Embassy Rabat · German CG Casablanca
Not legal advice. Verify current requirements with the relevant German mission before applying.
See also
Request a lawyer consultation
Leave your details and we will connect you with a vetted immigration lawyer when available. GermanyTalent is not a law firm — this site provides general information only, not legal advice.