AD OU movement for Disable and Re-hire

I can recommend you to use sailpoint service standard before provisioning rule as mentionned here : Services Standard Before Provisioning Rule - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community

You should make request to your PS or Sailpoint support to deploy this rule in your tenant. Once D$deployed you can easlily configure the AD OU movement directly in your AD source configuration.