In terms of encryption here's a nice blog post about end-to-end message encryption:
https://blog.codecentric.de/en/2016/10/transparent-end-end-security-apache-kafka-part-1/