Recommended way to setup a federation between a public and private cluster

I have a use case of setting up a public nomad cluster with the possibility to federate some jobs based on the datacenter value onto a private cluster that has been firewalled in a private network.

The private cluster has network egress but no ingress on any port whatsoever.

Is this possible? My initial thought was to set up a system job that polls the public cluster for jobs, execute it within the private cluster and update the public cluster endpoint.

Is there a better way to achieve the same effect, with a standard federation deployment. I have read the documentation, but couldn’t find any information related to my use case?