That solution is fine, as long as your servers and all employees are in the same network (or use a VPN).

For those that work remotely, or use external integration tests for their staging environments, public access is OK.