I think August Lock would even take the need for an API away, just need to manage users via existing features. I think it even lets you timebox if you only want certain employees to have 8 - 5 access vs 24 hour access.

However, it'd be an extra step and not integrated with some central employee list so the risk of forgetting to remove someone may be too high if using existing features, so that point may be moot.