Local network improvement (on-site, Amsterdam, NL) -- 2

NOTE: the work is to be performed on-site (location: Amsterdam, NL) during business hours!

I am looking for an experienced network engineer to assist me with improving my local network security.
The scope includes:
1x switch (Netgear)
1x router (Cisco)
1x wifi AP (Asus)
<32 endpoints (all unknown are to be shutdown if we decide it’s necessary)

AGENDA
1. Secure ports on the network switch: shutdown unused, determine endpoints for the used (create several vlans if we decide it’s necessary)
2. Enable filtering of external inbound traffic (inter-vlan traffic if we decide it’s necessary)
3. Secure hardening of router, switch, wifi AP configuration (wifi network access method will remain unchanged)
NOTES:
- all equipment has already been installed and setup
- the work is to be performed on-site (location: Amsterdam, NL) during business hours
- upon the results the other work can be planned (e.g. changing wifi network access method, AAA- deployment, e.t.c.)

We expect the job being done during 1 day (the network equipment model and network scheme will be shared prior to the visit)