The problem isn't with dns but in how to manage access to the system. You should be able to add any subdomains to your main domain through your registrar. I haven't worked with the server side of VPN's so I don't know how traffic comes through although I know it is possible to grant access to internal systems through the VPN. I VPN to IBM and only have access to internal servers that way.

Carl