Windows RDP IPSec Security Implementation

I'm looking for a security expert to assist in implementing IPSec for my Windows Remote Desktop Protocol (RDP). The primary goal of this project is to enhance the security of my RDP setup to prevent unauthorized access.

Key requirements:
- Proficient in Windows operating system and networking
- Experience with IPSec configuration and implementation
- Ability to enhance RDP security without compromising performance
- Familiarity with best practices for securing RDP against unauthorized access

At this point, I use RDP to connect to my server. This is by port fwd on the ISP's router to the server IP.

All I have to do is white list / add the public IP of the network from where I am connecting from in the IP scope of firewall on the server and I can connect.

I need to eliminate this and use MAC address of the client side / system, so irrespective to what IP I am connecting from, the server should only authenticate selected / authorized MAC that I have defined on the server.

IF this requires a 3rd party firewall software, I am ok, as long as it is open source.

If this can be controlled via router with DDWRT or Openwrt, I can arrange that as well.

At the end of the project, I will need documentation for the same so in future If I need to implement this, I should be able to do it on my own.

Ideal candidate should have a strong background in network security, particularly with Windows environments, as well as experience with IPSec implementation. The ability to explain complex security concepts in a simple manner would be highly valued. This is a great opportunity for a security professional to contribute their expertise to a critical application.