As someone who does exactly that right now. Yes.

You need a Linux machine in a separate network with separate firewall rules and the developer has to devote a bit of their time to managing that machine.
It can even be centrally managed, if you have the capacity.

But why would you want that? To secure your shit while allowing the devs to to what they like to their equipment.