How does SMTP get to the server at the moment? IP address or port NATed through to it? If so, use the same approach and NAT tcp/443 through to it.
Otherwise, you could deploy a reverse proxy. I like using HAProxy, but you can use whatever is your favourite.
None of this has much to do with Systems Manager ...