Generally to be "in-demand", you need about 6 years of experience & highly desirable certifications (at least one security cert such as sec+ or CASP, dns-related cert such as Infoblox CDCA, and typically something else like cloud engineering or maybe automation engineering related). Getting into DNS is usually something that happens after you've already been an enterprise network engineer for a number of years. It's highly specialized and rather difficult.

Not possible. While AI can theoretically do the job, error is too expensive. AI already does much of my work, but I have to make risk assessment & I run the automation systems. I already automate much of my daily work. But when big stuff breaks, automation won't fix it.