Also add DMARC to the list aswell, and make sure to warm up the domain again once you're done.
Also, what policy do you recommend fro DMARC: none, quarantine, or reject?
If you're just starting out, start with none. Quarantine or reject needs to be carefully monitored over time.
Once you are confident that all the legitimate mail is aligned, then go straight to p=reject. Many will recommend quarantine, but it's better to have an email bounce back immediately vs silently get lost in a spam folder. Outside of troubleshooting there isn't much use for P=Quarantine in DMARC or '~all' in SPF.