Explanation

Stipulate expresses a requirement, and must have three years' experience conveys that obligation most directly. Have is ungrammatical here, had shifts the meaning to the past, and shall have sounds like a future promise rather than a requirement. So D is the answer.