If it’s remote, sometimes they’ll pay someone else to do the work and pocket the difference. And/or the job may just be a ruse to get credentials in the org because it’s an espionage target or to use as a launch point to go after an espionage target.