Awesome to hear that you got it fixed. I've been searching for a few days and haven't been able to resolve it. I followed your steps and still have the one way sync. Would you mind posting your:
get-mailboxserver <server_name> | get-ADpermission -user <service_account_name> | FL
Of course with the appropriate edits
I'd like to compare mine to yours.