>>beebma+(OP)
I have found clients based on librdkafka [1] or sarama [2] to be pretty robust and capable. For SSL, librdkafka relies heavily on OpenSSL which can cause a few headaches IME. But the rest is straightforward.
[1] https://github.com/edenhill/librdkafka
[2] https://github.com/Shopify/sarama