@Meduober that depends on your budget and the hardware, a more advanced solution would be SDWAN, but that might be more expensive and add complexity. DMVPN or FlexVPN are an adequate solution and is supported on Cisco IOS-XE routers.
Both DMVPN and FlexVPN are route based VPNs, which creates a hub and spoke topology (and spoke-to-spoke if required). The routing protocol (OSPF, BGP, EIGRP or IKEv2 routing if using FlexVPN) controls which traffic is encrypted and routed over the VPN tunnel.
Or alternatively use a Firewall such as the FPR1010 running FTD or ASA software, which can be managed centrally (FMC/CDO), both solutions support Dynamic/Static VTI.