For Employees it is a connected source so the manager would be updated from auth source.
For contractors it was a disconnected source so we have used an external script to run a search for the active manager.
Then update the account with the active manager ID. Happy to share the endpoint details and steps if you are looking for something similar.