802.1x WiFi Setup for Schools

We need a network engineer to set up 802.1x WiFi across three school sites. Users utilize Entra ID and M365, and there are Netgear APs with no servers onsite, just firewalls and switches. The ideal candidate will have experience in network administration and be able to work with Entra and M365. I use Netgear Insights to manage the hotspots across all 3 sites. I can remote to each site via a PC on each site via Teamviewer.

At moment I've set up WIFI ID and PW. However, the government say that this is not good enough and the wifi needs to use 8021x and be certification based.

I've looked at using Cloud based authentication but there's a monthly cost, I want someone to provide me a solution where it's all internal, the devices are shared, so they must authenticate to the wifi and I don't want to subscribe to anything, just set up internally. Don't mind if a server is needed, I am phsyically close by to all 3 sites.

London / Surrey UK based schools, please provide me with a fixed price for whole project. Devices are Win11 laptops and iPads.

All devices are on Intune.

Any other questions, please do not hesitate to ask...