Creating a secondary domain controller (AD DS server) in Azure and turning off the on-prem one

Hi All,

We have an on prem Domain Controller. for redundancy we are planning to configure a VM with Azure with a AD DS role on it. 

Our on-prem and Azure network is connected via express route. 

eventually, we would like to turn on our on-prem Domain Controller and would like the on prem work load (users and devices) to authenticate from the Azure AD DS VM. 

will that work?

Thanks