Use diskutil without firmware password
If you don't have the firmware password, you cannot boot into recovery mode, and thus you cannot make distil bypass the protection. Even worse, there's no way to reset a firmware password than going to recovery mode to disable it (which requires the original password), or taking it to the Apple store with the original receipt so they can disable it for you.

If the problem has to be fixed, talk to the IT department and have them fix it for you.