Career · 2026-10-25

The Quiet Reason Good IT People Stay Under $100K

You can be dependable, technically capable, and the person everyone calls when something breaks—and still see very little salary growth.

That's not automatically because you're missing a certification or aren't working hard enough.

Sometimes the problem is your experience is growing, but your career direction isn't changing.

You're getting better at your current job without building a clear case for the next one.

Being useful to your team doesn't guarantee a promotion

Your manager may value your work and want you to succeed.

They also need someone to keep the systems running and the tickets moving. Being excellent at that job doesn't create a new opening or a promotion budget by itself.

Rather than assume your manager will notice your ambitions, have a specific conversation:

The last question matters. Training and promotion aren't the same commitment.

If the opportunity doesn't exist internally, you'll need a different plan for reaching the market.

Replace “I want to get into cybersecurity” with a real responsibility

A vague goal makes it difficult for anyone to help you.

Suppose you've handled login and onboarding tickets. Instead of asking to “do more security,” ask whether you can contribute to an approved identity-related project.

That could mean:

Choose something your employer actually needs and you're allowed to work on.

You may develop skills even if the project doesn't change your pay immediately. Record that distinction rather than treating every extra responsibility as a promised raise.

Keep a record of progress that an outside employer would understand

A task list might say, “Closed 45 tickets.”

A useful career record answers what you can now explain, demonstrate, or handle.

For example:

Routine activity Career-relevant evidence
Fixed repeated sign-in tickets Identified a recurring failure pattern and documented checks
Updated group memberships Followed approved access controls and verified the change
Escalated an application issue Collected timestamps, errors, and affected-user details for investigation

Only describe things you actually did. Don't copy confidential customer information into a public portfolio.

This record makes your next resume easier to write. It also shows whether you're progressing toward a new role or simply repeating familiar tasks.

Compare internal promises with external job requirements

Pick a real job you'd consider, perhaps in Identity and Access Management (IAM).

Compare its responsibilities with your career record.

You may find that you already have relevant experience in Active Directory, MFA, user administration, or authentication troubleshooting.

Or you may find one missing area, such as single sign-on integration or identity lifecycle management.

That gives you a specific next step: apply, improve your positioning, or build a focused lab.

Don't assume every under-$100K IT professional should pursue IAM. Use the market and your own interests to test the fit.

Give your plan a review date

Choose a realistic checkpoint, perhaps four weeks from now.

By then, try to have:

  1. Discussed a concrete growth opportunity at work.
  2. Saved three external jobs you'd genuinely want.
  3. Built or documented one relevant piece of evidence.
  4. Submitted applications if you're already a reasonable match.

At the checkpoint, look at the results. If interviews reveal technical weaknesses, address them. If you're qualified but aren't applying, change that. If your current employer has no path forward, stop assuming time alone will fix it.

Location, industry, responsibilities, and personal priorities all affect pay. Under $100K isn't a verdict on your talent. It's a reason to examine your options if the income no longer matches your goals.

I built The Six-Figure IAM Career Playbook around choosing a role, building relevant proof, and following a 90-day plan rather than collecting random credentials. It's $9.

Do your current job well. Just make sure your efforts are also preparing you for the next one.

Originally published on CyberAndChill.

← All articles