Awesome to hear that you got it fixed. I've been searching for a few days and haven't been able to resolve it. I followed your steps and still have the one way sync. Would you mind posting your:

get-mailboxserver <server_name> | get-ADpermission -user <service_account_name> | FL

Of course with the appropriate edits I'd like to compare mine to yours.