I made some progress when I added a principal block. I added that block because I tried doing this manually on the machine and exporting and that was the only main difference.
The scheduling is happening in a process running as IIS AppPool\DefaultAppPool right now so not having much luck. Is the only way to get that to work to change the app pool identity? Main reason I ask is that this is on an Amazon ElasticBeanstalk machine, so I don't really have the ability to do that unless I start using custom images and I'm trying to avoid that.