Strategy
Zero to 2030-Ready
A four-year, month-by-month plan from zero IT experience to 2030-ready, evaluated through CTO, CIO, CISO, and product-design lenses, with a companion tracker spreadsheet.
On this page
- Executive Framing
- YEAR ONE: 2026: Build the Foundation, Get the Job
- Month 1: Learn How Computers Actually Work
- Month 2: Get Hands-On with Both Operating Systems
- Month 3: Networking Fundamentals & Your First PC Build
- Months 4–5: The Service Desk Skill Set
- Month 6: Certification, Resume, and Job Search Prep
- Months 7–9: Land the Entry-Level IT Role
- Months 10–12: First 90 Days on the Job + Continued Growth
- YEAR TWO: 2027: Build Depth, Start Specializing
- Q1: Enterprise Administration Deep Dive
- Q2: Networking Depth & Security Foundations
- Q3: Automation and Scripting
- Q4: Cloud Foundations
- YEAR THREE: 2028: Modern SDLC and Infrastructure as Code
- DevOps and Infrastructure Bridge
- ITIL → DevOps Mental Model
- Secure Software Development Lifecycle (SSDLC)
- API Development & Databases
- YEAR FOUR: 2029: Agentic Engineering & 2030 Readiness
- What Agentic Engineering Means in Practice
- The AI Engineering Stack
- Agentic Engineering Projects
- Skills That Will Still Matter in 2035
- Comprehensive Resource Directory
- Free Courses and Platforms
- Certification Roadmap
- Communities and Networking
- Books
- Final Strategic Notes
From absolute zero to 2030-ready. An IT career development strategy for someone starting from scratch, running from 2026 through 2029 and beyond. Prepared for a 24-year-old with zero IT experience. Designed through CTO, CIO, CISO, and Product Design lenses. Calibrated for the Agentic Engineering Age.
Executive Framing
This strategy is built for someone with absolutely zero IT experience, no certifications, no lab, no command line, no background. Just motivation, the ability to learn fast, and a clear plan.
The timeline runs from mid-2026 through 2029, with the goal of being “2030-ready”, meaning you understand enterprise technology from the ground up, can administer systems, automate tasks, secure environments, and use AI agents to multiply your output.
Every recommendation in this document has been evaluated through four strategic lenses:
- CTO: Can this person build and scale systems? Deep technical foundations in compute, networking, storage, automation, and modern SDLC.
- CIO: Can this person deliver and manage IT services? ITIL service delivery, M365 administration, enterprise tooling, stakeholder communication.
- CISO: Can this person secure what they build? Identity management, Zero Trust principles, SSDLC, compliance awareness from day one.
- Product Design: Can this person think about users holistically? UI/UX awareness, documentation, blogging/vlogging, portfolio presentation.
One rule above all others: document everything you learn. Write it down, screenshot it, blog about it. Your documentation becomes your portfolio. Your portfolio gets you hired.
YEAR ONE: 2026: Build the Foundation, Get the Job
Month 1: Learn How Computers Actually Work
You are not touching certifications yet. You are not applying to jobs yet. You are building the mental map that everything else sits on.
Weeks 1–2: What Is a Computer?
Learn what each component is and what it does, not how to configure them yet, just what they are:
- CPU: the brain. It does math and makes decisions.
- RAM: short-term memory. Fast, but forgets everything when power is off.
- Storage (HDD, SSD, NVMe): long-term memory. Slower, but it remembers.
- Motherboard: the nervous system. Connects everything together.
- Power Supply (PSU): the heart. Feeds electricity to every component.
- Network Interface Card (NIC): how the computer talks to other computers.
- GPU: a specialized brain for graphics and AI workloads.
Free resources to start with:
- YouTube: “How Computers Work” playlist by Code.org
- YouTube: Linus Tech Tips PC Build Guides
- YouTube: NetworkChuck, “you need to learn LINUX”
- Course: Harvard CS50, Introduction to Computer Science (free)
Start a personal glossary, write every new term with a one-sentence definition in your own words. Physical notebook or digital. You will add to it for years.
Weeks 3–4: What Is an Operating System?
An operating system (OS) is the software that sits between you and the hardware. It manages everything. The three you need to know: Windows (enterprise desktops/servers), Linux (servers, cloud, security), macOS (creative industry, some enterprise). You will focus on Windows and Linux.
Hands-on tasks:
- Find out what is inside your current computer. On Windows: right-click This PC → Properties. Write down CPU, RAM, storage.
- Download and install VirtualBox (free) from virtualbox.org.
- Create a virtual machine and install Ubuntu Desktop 24.04. Follow a YouTube walkthrough.
- Open the Ubuntu terminal. Type:
whoami(shows your username). Type:pwd(shows your location). You just used the command line.
Download VirtualBox: https://www.virtualbox.org/ Download Ubuntu 24.04: https://ubuntu.com/download/desktop
By the end of Month 1 you should:
- Name all parts of a computer and explain what each does in plain English
- Understand that an operating system manages hardware and software
- Have a virtual machine running Linux
- Have typed commands into a terminal and gotten responses
- Started a glossary of IT terms
Month 2: Get Hands-On with Both Operating Systems
Weeks 5–6: Windows: The Way an IT Person Sees It
Most people use Windows as a consumer. IT people see services, processes, event logs, user accounts, and group policies.
Learn to navigate Windows like an admin:
- Task Manager (Ctrl+Shift+Esc): shows every running process, CPU, Memory, Disk, and Network usage
- Services (services.msc): background programs that enterprise applications depend on
- Event Viewer (eventvwr): where Windows logs everything. First place IT looks when things break.
- Device Manager: shows all hardware. Yellow triangle = driver problem.
- Control Panel vs Settings: Settings is consumer view, Control Panel is admin view. Learn both.
Practice tasks:
- Open Task Manager. Sort by Memory. Find the top 5 processes. Google each one, write down what it does.
- Open Event Viewer → Windows Logs → System. Find a Warning or Error. Google the Event ID.
- You are now doing basic troubleshooting. This is literally what help desk does.
Weeks 7–8: Linux: The Basics That Matter
You do not need to become a Linux expert right now. You need to be comfortable enough that you do not panic when you see a terminal.
Essential commands to learn by doing:
| Command | What It Does | Example |
|---|---|---|
ls | List files in current folder | ls -la |
cd | Change to a different folder | cd Documents, cd .. (go back) |
mkdir | Make a new folder | mkdir my-first-folder |
touch | Create an empty file | touch notes.txt |
cat | Display contents of a file | cat notes.txt |
nano | Simple text editor in terminal | nano notes.txt (Ctrl+O save, Ctrl+X exit) |
sudo | Run a command as admin | sudo apt update |
sudo apt install | Install software | sudo apt install htop |
ip a | Show network configuration | ip a (find your IP address) |
ping | Test internet connectivity | ping google.com (Ctrl+C to stop) |
Free Linux learning: The Linux Command Line by William Shotts (free online).
By the end of Month 2 you should:
- Troubleshoot basic Windows issues using Task Manager, Event Viewer, Device Manager
- Navigate a Linux system using the command line
- Explain what a process, a service, and an event log are
Month 3: Networking Fundamentals & Your First PC Build
Weeks 9–10: How Do Computers Talk to Each Other?
Networking is where most beginners get intimidated. At its core, networking is just computers sending messages to each other using agreed-upon rules.
| Concept | What It Is | Real-World Analogy |
|---|---|---|
| IP Address | A unique address for every device on a network (e.g., 192.168.1.50) | Mailing address |
| Subnet Mask | Defines the network neighborhood (e.g., 255.255.255.0) | ZIP code / neighborhood boundary |
| Default Gateway | The door out of your network to the internet (your router) | Front door of your building |
| DNS | Translates names (google.com) into IP addresses | Phone book / contacts list |
| DHCP | Automatically assigns IP addresses to devices | A receptionist assigning room numbers |
| MAC Address | Hardware serial number burned into your network card | VIN number on a car |
| Ports | Doors on a computer (80=HTTP, 443=HTTPS, 22=SSH, 3389=RDP) | Different doors in a building for different purposes |
Network troubleshooting commands to practice:
ipconfig /all(Windows) orip a(Linux), find your network configurationping 8.8.8.8, test internet connectivityping google.com, test DNS resolutionnslookup google.com, see DNS translation happening in real timetracert google.com(Windows) ortraceroute google.com(Linux), see every router your traffic passes through
Watch: Professor Messer’s CompTIA Network+ Course (free).
Weeks 11–12: Budget PC Build #1
Build a computer from parts. This teaches hardware, builds confidence, creates portfolio content, and gives you a lab machine.
Budget: $200–$400 using used parts
- Where to buy: Facebook Marketplace, eBay, Goodwill Computer Works, r/hardwareswap
- What to look for: used office PCs (Dell OptiPlex, HP ProDesk, Lenovo ThinkCentre) for $50–$150
- Minimum: any recent Intel/AMD CPU, 16GB RAM, SSD (even 256GB works)
Document the entire build with photos and explanations. This is your first portfolio piece.
Months 4–5: The Service Desk Skill Set
This is where you train specifically for the job you are going to apply for. A service desk person fixes technology problems for people, through tickets, calls, and remote sessions.
The most common help desk tickets:
- “I forgot my password” / “I’m locked out”
- “My email isn’t working” (Outlook, Teams, calendar)
- “I can’t connect to Wi-Fi / VPN”
- “My computer is slow”
- “I need software installed”
- “My printer doesn’t work”
- “I got a weird error message”
- “I need access to [folder / application / system]”
You are going to learn how to handle every single one of these.
Month 4: Microsoft 365 Administration
Sign up for a free Microsoft 365 Developer Program account. This gives you a sandbox with 25 user licenses, identical to what real companies use.
Skills to build:
- Create users, assign licenses, reset passwords, disable accounts
- Create security groups and manage membership
- Configure shared mailboxes, distribution lists, mail flow rules
- Set up Teams, channels, and guest access policies
- Manage OneDrive/SharePoint permissions and sharing links
- Navigate Entra ID (Azure AD), the identity system underneath M365
Free training: Microsoft Learn, M365 Administrator Learning Path.
Month 5: Active Directory, Intune, and Ticketing
Active Directory (AD):
- Install Windows Server 2022 Evaluation (free, 180 days) in a VM
- Promote it to a Domain Controller
- Create OUs, users, groups, and Group Policy Objects
- Join a Windows 10/11 VM to the domain
Download Windows Server 2022 Evaluation: Microsoft Evaluation Center.
Intune (Microsoft Endpoint Manager):
- Explore Intune in your M365 Developer tenant
- Enroll a test device, create compliance and configuration policies
- Deploy apps to managed devices
- Understand Conditional Access basics: device compliance → access decisions
Free training: Microsoft Learn, Intune Fundamentals.
Ticketing systems:
- Sign up for a free-tier ticketing platform: Freshdesk Free, Jira Service Management Free, or self-hosted osTicket
- Create 5 practice tickets based on common issues listed above
- Practice writing professional ticket notes: what the user reported, what you checked, what you did, what the result was
Month 6: Certification, Resume, and Job Search Prep
CompTIA A+ Certification. Two exams: Core 1 (hardware, networking, mobile devices) and Core 2 (OS troubleshooting, security, operational procedures). You have already covered most of the material through your labs.
Study resources:
- Professor Messer A+ Course (free): professormesser.com
- Jason Dion Practice Exams (Udemy, ~$15): udemy.com
- CompTIA CertMaster Practice: comptia.org
Additional recommended certifications:
- Microsoft SC-900 (Security, Compliance, Identity Fundamentals), introduces Purview, Defender, Entra ID.
- Google IT Support Professional Certificate: coursera.org.
Getting Your First Tech Paycheck
Do not wait for the perfect help desk job. Start generating income from tech-adjacent work now.
Remote customer support at tech companies:
- Search We Work Remotely, Remote.co, LinkedIn, and Indeed for “remote customer support” or “remote technical support”
- Companies like Automattic (WordPress), Zapier, HubSpot, Shopify hire remote support with minimal experience
Apprenticeship programs (often free + paid):
- Year Up, paid tech apprenticeships: yearup.org
- Per Scholas, free IT training + job placement: perscholas.org
- NPower, free tech training for young adults: npower.org
- Apprenti, tech apprenticeships: apprenticareers.org
- Merit America, career mobility programs: meritamerica.org
Local opportunities:
- Geek Squad (Best Buy), Micro Center, Staples, retail tech with real troubleshooting
- Local MSPs (Managed Service Providers), email 10–20, offer a trial period
- Staffing agencies: TEKsystems, Robert Half, Insight Global, Apex Systems, Randstad
- Freelance PC repair on Nextdoor, Facebook Marketplace, Craigslist
Months 7–9: Land the Entry-Level IT Role
You are now job-ready. Apply aggressively: 5–10 applications per day, 5 days per week. Target help desk, service desk, IT support, desktop support, AT&T/Spectrum/Lumen network technician programs, and data center technician roles at Equinix, QTS, DataBank, or local facilities.
Where to look:
- LinkedIn, set alerts for “help desk” + “entry level” + “remote”
- Indeed, Dice, ZipRecruiter
- Reddit: r/ITCareerQuestions, r/sysadmin
Interview Preparation
Common questions and how to answer them:
- “Tell me about a time you solved a technical problem.” → Talk about your homelab. Be specific about the problem, your diagnostic steps, and the resolution.
- “A user says email isn’t working. Walk me through it.” → Scope: just them or everyone? Network: can they reach the internet? Application: can they use OWA? Basic fixes: restart Outlook, check licenses, check account status.
- “How do you prioritize with 10 tickets and a ringing phone?” → Severity and impact. VP locked out before a board meeting outranks a wallpaper change. But acknowledge every ticket.
- “What if you don’t know the answer?” → Knowledge base first, then search the error, then escalate with detailed notes about what you already tried.
Months 10–12: First 90 Days on the Job + Continued Growth
- First 30 days: learn the ticketing system, escalation workflow, team structure. Ask questions. Not knowing is expected, pretending to know is not.
- Days 31–60: identify one repetitive task and automate it. Volunteer for project work.
- Days 61–90: handle most L1 tickets independently. Ask about L2 work. Express interest in specialization.
Continued learning during employment (30–60 min/day):
PowerShell:
- Book: Learn PowerShell in a Month of Lunches
- Automate daily tasks: bulk user operations, automated reports, scheduled cleanup scripts
Python:
- Book: Automate the Boring Stuff with Python (free online)
- First project: a script that calls an API and does something useful
Linux:
- Set up an Ubuntu Server VM, manage it remotely via SSH
- Automate backups with a bash script and cron job
YEAR TWO: 2027: Build Depth, Start Specializing
Q1: Enterprise Administration Deep Dive
Intune deep dive:
- Autopilot (zero-touch device provisioning)
- App protection policies, compliance + Conditional Access integration
- Windows Update for Business, managing OS updates across the org
Purview (Data Security & Compliance):
- Sensitivity labels, classify documents (Confidential, Internal, Public)
- Data Loss Prevention (DLP), prevent sensitive data from leaving the org
- Retention policies, audit logs, eDiscovery basics
- Critical in regulated industries: healthcare (HIPAA), finance (SOX/PCI), government
Training: Microsoft Learn, Information Protection.
Entra ID (Identity) deep dive:
- Conditional Access policies, backbone of Zero Trust security
- Enterprise application SSO, Privileged Identity Management (PIM)
- Password-less authentication (FIDO2, Windows Hello, Authenticator)
Certification: MS-102 (M365 Administrator) or SC-300 (Identity & Access Administrator).
Q2: Networking Depth & Security Foundations
- VLANs, subnetting (/24 through /20), firewalls, VPN (IPSec, WireGuard), wireless (WPA3, RADIUS)
Certification: CompTIA Security+, the most recognized entry-level security cert.
Identity & Access Management (IAM) focus:
- Learn Okta (free dev account) and Duo (Cisco MFA)
- Understand SAML, OAuth 2.0, OpenID Connect (OIDC) protocols
- IAM is remote-friendly, high-demand, and doesn’t require years of experience to enter
Homelab expansion, Budget PC Build #2:
- Dedicated lab server: 32GB RAM, 4-core CPU, 500GB+ SSD
- Install Proxmox VE (free hypervisor)
- Run: Windows Server AD, Ubuntu Server, pfSense firewall, Uptime Kuma monitoring
Q3: Automation and Scripting
- PowerShell: automated onboarding/offboarding scripts, scheduled reporting, error handling
- Bash: automated backups with rotation, log monitoring, system hardening scripts
- Python + Microsoft Graph API: query M365 resources programmatically, build IT dashboards
Q4: Cloud Foundations
Create a free Azure account ($200 credit). Deploy VMs, virtual networks, storage accounts, NSGs.
Certification: AZ-900 (Azure Fundamentals).
Complete the Cloud Resume Challenge (Azure version), resume website with serverless visitor counter, CI/CD, and a blog post about the process.
YEAR THREE: 2028: Modern SDLC and Infrastructure as Code
DevOps and Infrastructure Bridge
Traditional IT manages servers manually. Modern IT treats infrastructure like software, defined in code, version-controlled, tested, deployed through pipelines.
Git and Version Control:
- Free course: Git & GitHub for Beginners (freeCodeCamp)
- Learn: clone, branch, commit, push, pull, merge, pull requests
Docker and Containers:
- Free course: Docker Tutorial for Beginners (TechWorld with Nana)
- Run your first container:
docker run -d -p 80:80 nginx - Deploy homelab services with Docker Compose: Uptime Kuma, Portainer, Pi-hole, Grafana
Infrastructure as Code:
- Terraform: HashiCorp Learn, Terraform Tutorials
- Ansible: Ansible Getting Started Guide
- Workflow: Terraform creates infrastructure → Ansible configures it → Git tracks it → CI/CD applies it
CI/CD Pipelines:
- Free: GitHub Actions Documentation
ITIL → DevOps Mental Model
| ITIL Process | DevOps Implementation |
|---|---|
| Change Management | Pull requests, code review, CI/CD with approval gates |
| Incident Management | Monitoring + alerting + automated runbooks |
| Problem Management | Observability (logs, metrics, traces) + blameless postmortems |
| Service Request | Self-service portals, automation, chatbot fulfillment |
| Configuration Management | Infrastructure as Code, Git-tracked configurations |
Secure Software Development Lifecycle (SSDLC)
- Secrets management: environment variables, Azure Key Vault, HashiCorp Vault
- Dependency scanning: Snyk, Dependabot, Trivy
- Container scanning, infrastructure scanning (Checkov, tfsec)
API Development & Databases
- Build APIs with FastAPI (Python), modern, beginner-friendly, auto-generates documentation
- Learn SQL with PostgreSQL
- Master the Microsoft Graph API, programmatic M365 management
Certifications for Year 3: AZ-104 (Azure Administrator), CySA+ (Cybersecurity Analyst), AZ-500 (Azure Security), or Terraform Associate.
YEAR FOUR: 2029: Agentic Engineering & 2030 Readiness
What Agentic Engineering Means in Practice
The progression of your capability over the four years:
| Year | Approach | Example (Password Reset) |
|---|---|---|
| 2026 | Manual | Reset passwords one at a time through the admin console |
| 2027 | Scripted | PowerShell script bulk-resets from a CSV file |
| 2028 | Automated Pipeline | CI/CD pipeline triggers the script when a ticket is submitted |
| 2029 | Agentic | Agent reads ticket, verifies request, resets password, updates ticket, notifies user, logs everything |
The AI Engineering Stack
Claude Code (Anthropic):
- Install and configure Claude Code, command-line agentic coding tool
- Use for: writing scripts, understanding codebases, debugging, documentation, refactoring
Anthropic API:
- Learn the Messages API: system prompts, tool use / function calling, multi-turn conversations
- Model Context Protocol (MCP): MCP Documentation
OpenAI:
- Learn the OpenAI API, same concepts, different implementation. Build agents with both.
Local model hosting, Budget PC Build #3:
- Software: Ollama (simplest on-ramp), Open WebUI (chat interface)
- Hardware: NVIDIA GPU with 12GB+ VRAM (RTX 3060 12GB budget, RTX 3090/4070 for more)
- Models: Llama, Mistral, Qwen, CodeLlama
Agentic Engineering Projects
- Project 1: IT Self-Service Agent: Chatbot that handles common IT requests via Microsoft Graph API with approval workflows.
- Project 2: Automated Incident Response Agent: Monitors homelab services, diagnoses issues, attempts fixes, escalates with diagnostics.
- Project 3: Security Compliance Scanner: Scans systems against CIS Benchmarks, generates compliance reports, optionally auto-remediates.
- Project 4: Documentation Agent: Scans network inventory, identifies drift, auto-updates documentation.
Skills That Will Still Matter in 2035
Regardless of how AI transforms the industry, these skills will remain in demand because they require judgment, context, and trust:
- Identity and Access Management (IAM): Zero Trust isn’t going away
- API Design and Integration: systems always need to connect
- Cloud Architecture and Security: workloads keep moving to cloud
- Infrastructure as Code: declarative infrastructure is permanent
- Incident Response and Observability: things will always break
- Security Engineering: AI makes insecure things build faster
- Systems Thinking: understanding how all layers interact
- Automation and Orchestration: tools change, the skill doesn’t
- Communication and Documentation: AI drafts but can’t earn trust
- Agentic Engineering: designing and governing AI agent systems
Comprehensive Resource Directory
Free Courses and Platforms
| Resource | What It Covers | URL |
|---|---|---|
| Harvard CS50 | Computer Science fundamentals | cs50.harvard.edu/x |
| Professor Messer | A+, Network+, Security+ video courses | professormesser.com |
| Microsoft Learn | All Microsoft certifications (free learning paths) | learn.microsoft.com |
| freeCodeCamp | Web development, Python, JavaScript, APIs | freecodecamp.org |
| TryHackMe | Beginner-friendly cybersecurity labs | tryhackme.com |
| KodeKloud | DevOps, Kubernetes, Terraform labs | kodekloud.com |
| NetworkChuck (YouTube) | Networking, Linux, Docker, homelab | youtube.com/c/NetworkChuck |
| TechWorld with Nana (YouTube) | DevOps, Docker, Kubernetes | youtube.com/c/TechWorldwithNana |
| The Linux Command Line (book) | Linux terminal mastery (free) | linuxcommand.org/tlcl.php |
| Automate the Boring Stuff | Python automation (free) | automatetheboringstuff.com |
| Cloud Resume Challenge | Cloud + CI/CD hands-on project | cloudresumechallenge.dev |
| Anthropic Docs (Claude Code) | AI agent development | docs.anthropic.com |
| OpenAI Platform Docs | AI API development | platform.openai.com/docs |
| Ollama | Local AI model hosting | ollama.com |
Certification Roadmap
| When | Certification | Cost (approx) | Purpose |
|---|---|---|---|
| Month 6 | CompTIA A+ (Core 1 & 2) | $700 total | Universal entry-level IT credential |
| Month 6 | Microsoft SC-900 | $165 | Security/compliance/identity fundamentals |
| Month 12 | ITIL 4 Foundation | $400 | IT service management language |
| Month 15 | MS-102 or SC-300 | $165 | M365 Admin or Identity & Access Admin |
| Month 18 | CompTIA Security+ | $400 | Entry-level security credential |
| Month 24 | AZ-900 | $165 | Azure Fundamentals |
| Month 30 | AZ-104 or AZ-500 | $165 | Azure Administrator or Security Engineer |
| Month 36 | Terraform Associate | $70 | Infrastructure as Code validation |
Communities and Networking
- Reddit: r/ITCareerQuestions, r/sysadmin, r/homelab, r/cybersecurity
- Discord servers: NetworkChuck, TryHackMe, various tech communities
- Local meetups: ISSA chapters (security), ISACA chapters, AWS/Azure user groups, Linux user groups
- LinkedIn: post weekly about what you are learning, engage with IT content
Books
- Learn PowerShell in a Month of Lunches, Don Jones (Manning)
- The Phoenix Project, Gene Kim (Amazon)
- The Linux Command Line, William Shotts (free online)
- Automate the Boring Stuff with Python, Al Sweigart (free online)
Final Strategic Notes
From the CTO: The tech industry needs people who can bridge traditional infrastructure and AI-powered automation. Entering now is ideal timing. People who grow up with agentic engineering as a native skill will outpace those retrofitting it.
From the CIO: Service delivery is being transformed by automation. Someone who starts at the service desk and understands both ITIL frameworks and how to automate them is on a direct path to IT management. Soft skills matter as much as technical skills.
From the CISO: By introducing IAM, Purview, Intune, and Zero Trust concepts at the service desk level, you build a security-first mindset that most IT professionals do not develop until years into their career. This is a significant competitive advantage in regulated industries.
From Product Design: The portfolio IS the product. Every blog post, GitHub repo, and lab document demonstrates the ability to learn, build, and communicate. A documented homelab and a blog with real content beats a certification alone every time.
Start today. Document everything. Ship early. Learn fast. The path from zero to dangerous takes about four years of consistent effort.
Companion download
Download the companion