For an investment of $0, an Archer C7, v2 or later, is a great AP.
Multiple SSIDs can be configured per radio. The SSIDs can be bridged to specific VLANs within the unit. The VLANs can be isolated with firewall rules in the Archer C7. The VLANs can be managed by the switch and "trunked" together as tagged over the Ethernet. Within the limits of reasonable sanity, several SSIDs and VLANs can easily be accommodated.
Specific config details would need to know a little more about how and what you want to connect up.