Comment by skainswoo

Tailscale is the easy solution here. Just wireguard all the individual machines together as required. Scrap the corporate VPN.

https://tailscale.com/