This is a hard problem. I would imagine a competent exchange would require people with skills (as a minimum) in the following areas -

- legality
- security
- policy
- high frequency programming ("coding" is not enough)
- scalable infrastructure