The service account does indeed already have the "lock pages in memory" right assigned to it.

UPDATE:

I have opened a support case with MS support and they have me running some traces and perf counters. At this time we don't know what it is that consumed up all the memory, but at least if it happens again we will have more intel.

I will follow up with the resolution, assuming we get one.