for step 2,I suggests that uses two fixed IP links,you can use load-balancing on this two link,this can provide redundancy and load sharing. For step 3,you need the last fixed IP link,the dynamic IP link can provide Internet service for your employees.
what's more,VRRP need two routers(At least,I never heard deploy VRRP on a single device)

hope this can help you!
moreover,this solution doesn't consider network security,and that's another topic.