How would you design a secure, highly available site-to-site VPN architecture for remote offices connecting to a cloud VPC at Shamrock Trading?