How can you offload IPSec workload from CPU to another device?

Answer:

Some Network cards can encrypt Network traffic using onboard processor, Here is just one example and No I have not used this or any other brand.

https://interfacemasters.com/products/SSL_IPSec_cards.html