Limiting organization members to specific projects

For security reasons, we require team members in our organization to be assigned roles AND project access since a member is not assumed they can access any and all projects in the organization. This creates a significant security risk for our product dev process since we have to limit our interactions with external devs or clients across the organization.