My biggest concern is having only one DevOps person. What happens if you get sick or are unavailable? You still need someone with around 5 years of DevOps experience. Being understaffed at critical moments can easily lead to losing customers. Also, how many employees and customers do you have? Do major clients, such as corporations or banks, require security certifications or specific processes? I think customers need to feel they can trust a company that is large enough and capable of taking responsibility, rather than a one-person company.