Permission Levels can be created using the Object Model. You could
package that code as an Event that would run when a Feature was
activated. Then you could add the Feature to existing site Definitions
through Feature stapling and set it to activate when the Site was
provisioned. Groups could be handled the same way. This would handle
it on every WebApp on the server, and you could also create it on
existing sites simply by activating the Feature.