This is literally what public/private key signing was invented for.

The person affiliated with the company signs their posting/emails with their private key, and the company maintains a list of all public keys corresponding to anyone working for them. That way, anyone outside the company who is allegedly talking to someone from a certain company can validate the signature against the public key to ensure it came from who they say they are.