Corporate WiFi - securing using Certificates and deploying using SCCM

We currently have two WiFi networks in our company - a public one and a private one. The public one uses WPA2-PSK and a password. This is fine, we do not want to change it. The private one presently uses a Windows Server RADIUS to only allow computers that in Active Directory to associate. We want to change this to use certificates, so that we can push out certificates automatically to all corporate computers and mobile devices using System Centre Configuration Manager (SCCM) so that they can join the private network automatically. We need someone to configure and test this for us. The WiFi hardware is all Cisco Meraki so the right person for this project should have experience in this area. The right person for this project should also have SCCM experience.