My problem is that the systems will need to be internet facing and security is the largest concern. I read it is not recommended to expose salt masters to the internet so I was hoping for some insight.

You could look at PtP vpn things here. (wireguard, notably)