IMHO this should be native. Otherwise the expectation is that site managers have to customise it. Surely most site managers would not want to allow a single role to both apply for jobs and post jobs… View resumes and post resumes…
PS – Resume Manager has the functionality to restrict browsing, viewing and contacting resumes based on role – so it seems like you do make exceptions ??