If you are making use of request center or API to grant entitlements directly to users, you can consider making use of certifications (auto created through WF’s) or this sample WF for entitlement revoke and then trigger the disable/delete operation through the same WF.
If you are assigning entitlements only through roles, entitlement revokes can happen automatically during user terminations, if you are checking the user status in the membership criteria.