This is possible, although it just became more complicated with Windows 11 22H2 when Microsoft (but surprise) disabled one of the most used protocols for doing it.
You'll need to use the Microsoft Certificate server (built into Windows), and deploy a certificate onto every device (for Windows machines you can do this via group policy automatically).
You'll use WPA2-Enterprise mode on the WiFi side, and I would use EAP-TLS as the authentication protocol. You'll use Network Policy Server (NPS) on Windows to achieve this.
Meraki had a guide for doing this using the much simpler MSCHAPv2. If you don't have Windows 11 machines in your environment, you can start with using this approach, and then add on certificates at a later point in time.
https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_...
Otherwise - if you haven't done this before don't have certificate services already deployed - get someone in to help you. It is massively more complicated now.