For small working groups that all trust each other (example: a network engineering team at an ISP with a bastion host that everyone needs to SSH into before accessing anything else), a really easy solution is to run an ircd that only listens on 127.0.0.1, only allows access via properly set up public/private key ssh shells, and have everyone keep a persistent "screen" (or tmux) session running.