@ryanc last time I looked, Dahua, HikVision, and Amcrest all fit the bill (I think Amcrest are white-label of one of those, prob Dahua). There are select models where ONVIF is a challenge, but largely they should all match for you. I tend toward Amcrest and know it the best of those 3.
When I see people list local-capable/POE/ONVIF, I also commonly see a bullet point for "company doesn't support oppression" factors, which tends to be the next differentiating factor among the leaders that overlap with your requirements.