I just use WinSCP with remote file encryption turned on and have VeraCrypt for the local temp storage.

That way my entire working file system is encrypted at rest, in transit, and while stored remotely - entirely with heavily mature off the shelf open source tools.