We currently have a system in place for user creation where help desk technicians use the import functionality in the memberof field to import CSV files filled with groups based on job titles.  

What we would like to do next is implement some sort of automation that runs periodically and "fixes" any users who have had groups added or removed erroneously.  

Does anyone have any experience with a solution that looks at users compares their group membership to a template based on job title (or other attribute) and adds/removes groups automatically?