That last clause, “and doesn’t stop,” is a killer. With a proper design you can have an exceptionally reliable system, but never a completely perfect one – although it may not need to be.
For the most part, NFPA 496 Chapter 7 and the appropriate Sections relevant to the pressuring “Type” (X or Z) will direct you to a final design. If you are fortunate, and it sounds likely in your case, and Type Z is all that is necessary, then you will have a relatively broad level of choices to accomplish your goal and virtually any reputable control panel fabricator/system integrator will be able to design it for you. (Actually, the reputable folks could handle Type X very well too; it’s just a much bigger pain)
Type Z offers a lot of wiggle-room for short-term failures; Type X demands an immediate system shutdown. Type Y is not applicable since the Switchgear/MCCs need to operate in an essentially unclassified environment.