Ask HN: How do you manage access to your internal infrastructure?

For folks at medium-to-large organizations where doing it manually for every employee isn't an option. I'm talking about things like IAM for K8s/Nomad, Postgres/MySQL/Mongo, SSH, etc - not necessarily just getting access to those resources in AWS/GCP/Azure, but actually configuring permissions for new hires (and ensuring those permissions are cleared when they leave!).