Thanks! That was it 
.
I needed to mask using an IP from the SRXB site, so the SRXA knew to send it back that way. source-nat interface wasn't enough, so I added a nat source pool with 10.2.0.254/32 to forward the traffic to SRXA through the tunnel. Lo and behold, it works!
Thank you all for taking the time!