Making WordPress available while logged into another website

The function wp_authenticate is pluggable, meaning you can override it with a function of your own of the same name. You could rewrite that to contact your “self-hosted, secure, members-only website” for logins instead of using the WordPress login system.

There are other pluggable functions in that file, like wp_validate_auth_cookie, which may prove useful with enough effort.