Go into infosec with a tilt towards app sec and architecture. No on call (unless you’re part of a SOC or incident response is part of the role). Do not accept on call roles.
I left DevOps/infra for infosec/risk mgmt in part due to on call rotations, and would never accept a job again that required them.