How about creating seperate table for SSN and DOB having FK reference as empid? After that these two column can be encrypted. The purpose of creating this table is you can exlcude in rplication or after restore you can drop the table for security purpose etc.

Also other concern is the accessing this data i.e. permission to access SSN & DOB should be properly evaluated.