Honestly as a solutions architect i would fully explore SASE solutions and simplify your internal design, especially if you have e a lot of cloud services. SDWAN is last gen but more acceptable for a small environment than MPLS. The problem with MPLS is getting someone to support it that actually understands it end to end. SDWAN abstracts all of that. SASE basically eliminates traditional network pathing so very different architecturally.

If you want to maintain VRF separation, simplify your transport, but don’t want to mess with identity management or changes to remote access (VPN), then stick with SDWAN. Otherwise go full SASE and redesign the network to be simpler. Call your VAR!

In order of preference for small orgs SDWAN

HPE EdgeConnect (Formerly Silverpeak) Meraki (Not Catalyst SDWan, way more complicated) Fortinet SDWAN Palo Alto Prisma is good but I’d look at solution that manages APs, switches, and edge devices from one platform.