I would make a workflow that has a Lock action under condition that user role = XYZ and then it cannot be edited by anyone without the right role (or you can do by user).
The workflow would just have criteria looking for sales orders in the Sales Order Billed status instead of any other status