Configure Azure AD or similar for smart card implementation

I own and manage a small business. Due to security requirements from customers and potential customers, I have a need to build a smart card authentication system. I need to have a smart card login to my workstation, that automatically logs out upon removal. I also need to have a way to deactivate the smart cards remotely. Finally, I need to be able to secure emails with certificates contained within the cards. I intend on using azure AD with a virtual server, since I am not working on an unlimited budget. I am open to suggestions as far as the hardware/software requirements. I am relatively familiar with technology in general, I'm not inept, but I'm no guru, either. I am looking for someone to consult, make recommendations, and implement this for me. This could potentially turn into a recurring deal as changes need to be made.