Actually, no he can't. OFAC will absolutely destroy him if he does. I have a remote job and I am even explicitly banned from doing any work for my company while I am in China or a bunch of other countries.