How would you design a secure network architecture for a new web-facing patient portal at Health Care Service?