You want to limit this connectivity to just that one employee?
You have access/control over all the network equipment?
Assuming the answer is yes to both questions, you might use something like PBR to route that one employee's traffic or you might have full routing between all transit devices but use something like ACLs to only allow employee traffic to use such a known path. (You might also be able to use something like VRFs, to support this, but likely a much more complex to provide.)
