I think this is a conflict of interest, ultimately. There should be separation of duties. You need guardrails in place, and you have to hire to manage these gua

I think this is a conflict of interest, ultimately. There should be separation of duties. You need guardrails in place, and you have to hire to manage these guardrails. In my experience development members know enough to be dangerous, and this can lead to misconfigurations / potential security incidents.