I am lead dev on a team of five people. Only three are coders. And only the coders are really technical enough to do a roll-out of our application to a production server. 

Our app is pretty successful and we have attained some high profile clients. These clients typically put us through pretty brutal security audits. For the most part, we pass these audits. But one area that trips us up is separation of duties. e.g. They want one person/team to handle dev environments, while one person/team handles the production environments. And furthermore, sometimes they even want the person who does the work (like pushing to production) and who monitors/supervises/approves the work to be separate roles as well.

The problem with only having three tech people is that we can't keep our [bus factor](http://en.wikipedia.org/wiki/Bus_factor) high while keeping our separation of duties that some clients require.

Thoughts? Solutions? Have you faced similar resource problems?

p.s. Tried to tag this devops and bus-factor, but I don't have enough rep to create new tags.