FWIW, Cloudflare would be my number one option, however I did have a scenario whereby it was not an option (couldnt move the domain into Cloudflare), so I open sourced the solution I used.
I do hope it helps others.
https://github.com/DanielSpindler83/SendGridClickTrackTLSProxy