Comment by aleph-

Look into Gravitational Teleport.

They have a cloud offering in beta where they'll manage the proxy/bastion.