Unifi Firewall & VLAN Deployment

I have a full Unifi stack—router, switches, and access points—ready to go, and I need an engineer who truly knows the Unifi ecosystem to turn the hardware into a secure, segmented network. The detailed hardware layout and IP plan are in the attached PDF, but the headline requirements are straightforward: six to ten VLANs built primarily for security, a rock-solid firewall configuration, and seamless Wi-Fi that respects the new VLAN boundaries.

The part that matters most to me is the firewall. I want clear, well-documented rules that isolate sensitive traffic while still allowing the few inter-VLAN exceptions noted in the spec. Once the rules are in place, each VLAN must be mapped across the switches, tagged correctly on the trunk ports, and broadcast over the appropriate SSIDs. When you are finished, I should be able to open the Unifi Controller, see tidy naming across all networks, and verify that devices in one VLAN cannot reach another unless explicitly allowed.

Please work remotely via a temporary site-to-site VPN or any other secure method you prefer. I’ll give you full controller access and remain available for quick decisions so we can move efficiently. Deliverables are simple: a configured Unifi environment that matches the PDF, a brief change log, and an export of the final settings so I can back everything up.