How do I connect to 802.1x EAP Wi-Fi network from an Android 10 device?
Before the client (aka supplicant) can talk to the authenticator it must first establish a TLS connection.  The failure might be occurring in the EAPOL START before a user authentication (TLS auth) can occur.  This might be why you do not see any authentication attempts on the Radius server. 

Yes you must select WPA/WPA2/WPA3-Enterprise in order to do EAP-TLS.  You need to specify both the CA Certificate and Client certificate in order to complete the EAP TLS Flow.

Are you familiar with Android Logcat?  You could start looking there and filtering on wpa_supplicant or EAPOL to see if there are any certificate validation or related errors.

Guessing why here but, it's possible your older devices will work with the same CA/Client certificate depending how old they are.  Certificate validation has improved (strengthened) in android over the years and it might be why its failing on new devices and not older.