Startups are too cheap to pay for someone running a proper VPN. Some rather buy some proprietary appliance and call it a day, even, if it ruins workflows of employees for years. (source: experienced this)
Yeah I've only worked for one company that had a dedicated Network guy, and his work was being phased out as we moved everything towards AWS. Eventually the only work to do at the company was managing security for the company wifi network