Yes, perfectly possible. With onion services, you get static identifiers to connect to the machine, and Tor is pretty good at working its way through NAT/firewalls. Bonus: You can seal that device off, and portscanning or similar won't give away anything.