How to execute datapump commands as sysdba from remote machine

expdp \"SYS@service AS SYSDBA\"

This works for me (10.2 and 11.1), but you need either to define service in your tnsnames.ora or to use proper SCAN. Generally, ORACLE_SID is a different identifier than TNS service, but for simplicity they often are administratively set to the same value.