Explain how you would design a secure network architecture for a hybrid on-premise and cloud environment.