You can still automate Let's Encrypt even if your system requires a DNS challenge. Using these PowerShell scripts and Amazon Web Services' DNS service Route 53 will do the trick.

Use Azure Automation with the Let's Encrypt free certificate authority to create, validate and install certificates on a firewall.