How are you managing access for remote or third-party developers who have access to your code, servers, and potential databases? What frameworks do you have in place to safeguard against third-party data breaches or insider data theft?

I agree with using VPN/A and like Zscaler's solution. It includes MFA, tracking, VDI use, etc. Ensure that you also check with legal to ensure that you are not in breach of contract if you use developers, for example, outside your country's borders.

I also see that it may be in the mfg context.  It also can connect the OT to the cloud securely without needing an IT/OT DMZ. 

Also, for OEMs to remote in securely to their equipment to conduct troubleshooting or run data analytics.  This can be 1-way or 2-way as well.

I'd use an SDP/ZTNA solution.  We offer that at NVIS AI, where you're able to quickly and securely provision and de-provision a contract workforce.  Feel free to connect if you're interested in learning more.