You need to interact with two different back end systems, depending on inbound request data...

Use service callouts configuration for each target, and use a condition to decide which to invoke.

Use a Key-Value Map configuration to access SSL and URL information to invoke target systems

Use an AssignMessage policy to override default target URL and define 2-way SSL configuration at runtime

Create another target endpoint with SSL configured and define route rule to pick that depends on available variables.