If you're not going to skimp on price Cold card would be option number 1, but if you can't get one of those id say Jade is a good starter option or Bitbox

Here's a list of hardware signing devices