Yeah, it's probably a long shot, but what the hell, right?
Unless... that *is* actually the recommendation, right? Your internal clients use an internal, not publicly accessible DNS server on subdomain.company.tld, while DNS to the rest of the world is served from a public-facing nameserver that just doesn't include the subdomain DNS zone, right?
I'm not getting that wrong, am I?