It depends on more details than you have provided. HOW did he work without authorization? False ID, false social security number, identity theft, bribed a school official to give him illegal work authorized CPT/OPT I-20, claimed to be a USC on the I-9, under the table??? It makes a difference. Find out and check with a lawyer for options with a full disclosure of the details.