Do you qualify?
DevOps engineering falls under ISCO-08 group 2519 (Software and applications developers and analysts NEC) or 2522 (Systems administrators) — both within sub-major group 25, a shortage occupation in Germany. You need:
- A job offer in Germany for at least 6 months
- A gross annual salary of at least €45,934.20 (2026 shortage threshold)
- A recognised degree, or 3 years of DevOps or systems engineering experience in the last 7 years
Degree recognition for Moroccan qualifications
The Diplôme d'Ingénieur d'État (5 years, ISCED 7) in Génie Informatique, Réseaux & Systèmes, or Génie Logiciel is the standard qualifying credential. ENSIAS (filière Génie Logiciel, filière IWIM), INPT (Advanced Software Engineering for Digital Services — cloud and automation explicitly in the curriculum), EMI (Génie Informatique, Génie Électrique with data-centre and cloud modules), and the ENSA network all award this degree. Check your institution and your specific programme at anabin.kmk.org — institution must be H+ and your programme must be listed as "entspricht" or "gleichwertig".
"DevOps engineer" does not appear as a programme title on any Moroccan diploma — the consulate evaluates whether the underlying CS/networks/systems engineering degree aligns with the job description. The Erklärung zum Beschäftigungsverhältnis your employer completes should describe the role in engineering terms (CI/CD pipeline design, IaC, container orchestration, site reliability).
A 3-year Licence LMD in Informatique or Réseaux may qualify at ISCED 6, but most DevOps applicants with only a Licence LMD use the § 18g(2) IT exception instead, particularly if they have a strong certification stack alongside their experience.
OFPPT Technicien Spécialisé (Systèmes et Réseaux, Développement Informatique): Below ISCED 6 — does not qualify Route 1. § 18g(2) requires 3 years of engineering-scope work in the last 7 years.
Salary threshold (2026)
| Category | Gross annual minimum |
|---|---|
| DevOps / ICT engineer (shortage, ISCO-08 group 25) | €45,934.20 |
| General Blue Card threshold | €50,700 |
| IT exception without degree (§ 18g(2)) | €45,934.20 |
Two routes to the Blue Card
Route 1 — degree: Diplôme d'Ingénieur from an H+ institution with the programme listed in anabin. Licence LMD at ISCED 6 also accepted in principle.
Route 2 — IT exception (§ 18g(2)): 3 of the last 7 years of DevOps work at university level. Experience letters must describe CI/CD design, IaC authorship (Terraform, Ansible, Pulumi), container orchestration architecture (Kubernetes, Helm), and system-reliability decisions — not only incident response or monitoring configuration.
Certifications (CKA, Terraform Associate, AWS DevOps Professional, Azure DevOps Expert) do not substitute for a degree or for the 3-of-7-years experience requirement. They are supporting evidence of technical depth, not qualifying credentials.
Worked example: Karim's Blue Card application
Karim Lahlou, 33, DevOps engineer, Rabat to Berlin
Diplôme d'Ingénieur from INPT (Advanced Software Engineering filière, 2015). Confirms INPT is H+ in anabin and that his programme appears in the comments. Apostille from Moroccan MFA on degree and transcript.
Nine years of experience: 2 years at a Moroccan IT services firm (Linux, shell scripting, VMware), then 7 years building and owning the DevOps platform at a Casablanca SaaS company — GitLab CI/CD, Terraform, AWS EKS, Prometheus/Grafana, security scanning in pipeline. Holds CKA and AWS DevOps Professional (supporting evidence only).
His registered address is in Rabat — he applies at the German Embassy Rabat. Job offer: Senior DevOps Engineer at a Berlin e-commerce platform, €62,000 gross/year.
Outcome: qualifies under Route 1. Settlement permit at 21 months with German B1.
Document checklist
Route 1:
- Passport (at least 2 empty pages)
- Degree certificate with Moroccan MFA apostille
- Academic transcript with Moroccan MFA apostille
- anabin printout or ZAB Statement of Comparability
- Erklärung zum Beschäftigungsverhältnis
- Health insurance confirmation
Route 2 (§ 18g(2)):
- Experience letters (CI/CD tools, IaC tools, container platforms, specific architecture decisions, seniority level) and payslips for each employer. CKA / cloud certifications as attachments (supporting, not qualifying).
Which German mission handles your application
Embassy Rabat and Consulate General Casablanca both handle employment visas. Jurisdiction follows your registered address. Confirm before booking via digital.diplo.de.
After approval: settlement permit timeline
- 21 months Blue Card + German B1 → settlement permit (§ 18c(2) AufenthG)
- 27 months Blue Card + German A1 → settlement permit
Common mistakes
Listing certifications as the qualifying credential on visa documents. CKA, Terraform Associate, and cloud certs are not degree equivalents. They do not satisfy Route 1 or § 18g(2) on their own.
Experience letters that read as sysadmin tickets rather than engineering design. "Maintained Kubernetes clusters" and "responded to on-call incidents" are operational descriptions. "Designed a multi-cluster GitOps architecture using ArgoCD and Terraform, cutting deployment time from 3 hours to 12 minutes" is engineering. Re-write before submitting.
Applying to the wrong mission. Jurisdiction is your registered address. Contact the relevant mission before booking.
When you need a lawyer
Consider one if your programme is not individually listed in anabin, if your experience is primarily operational (monitoring, incident response) without clear design and architecture scope, or if you are 45 or older with a salary below €55,770.
We are not a law firm and this page does not constitute legal advice.
Frequently asked questions
Can I use § 18g(2) if I have a Licence LMD and 4 years of DevOps experience? Yes. A Licence LMD may also qualify for Route 1 at ISCED 6 if the institution is H+ and the programme is listed. § 18g(2) is the cleaner path when the Licence programme is unlisted — but experience letters must show engineering design scope, not only operations.
Does the CKA or AWS DevOps Professional certification help my application? It helps as supporting evidence of technical depth. It does not replace the degree for Route 1 and does not count toward the 3-of-7-years requirement for § 18g(2).
Which ISCO-08 group is DevOps engineer classified under? 2519 if the role is primarily engineering design (CI/CD pipelines, IaC authorship, platform architecture). 2522 if it is more operations and administration. Both are in sub-major group 25 — shortage occupations at the €45,934.20 threshold.
Sources
- § 18g AufenthG, Bundesministerium der Justiz
- EU Blue Card: Make it in Germany
- anabin database, KMK / ZAB
- German Embassy Rabat · German CG Casablanca
Not legal advice. Verify current requirements with the relevant German mission before applying.
See also
Request a lawyer consultation
Leave your details and we will connect you with a vetted immigration lawyer when available. GermanyTalent is not a law firm — this site provides general information only, not legal advice.