Yes you can contract out the role of DPO, based on a service contract with an individual or an organisation The externally-appointed DPO should have the same position, tasks and duties as an internal DPO

Yes as long as the professional duties of the employee are compatible with the duties of the DPO and do not lead to a conflict of interests, rather than you having to create a new post