Setup VPN network

I need a network engineer to set up remote access to the corporate network for remote workers.
Server 2022 is already set up, but we will need to add relevant services and configure complete remote access to specific virtual machines, including any changes to the Active Directory.
including VPN services and any router configuration required.
link AD account to specific VM's

Also, configure NPA services to stop workers from downloading data to the local machine or USB. Configure all access to the local NAS drive to access relevant files and folders. Any other security measures required to stop data from being transferred?