There's no requirement for the sitemap to be at /sitemap.xml, or even to be named "sitemap.xml". They may have one, but since the norm is to submit them directly to a search engine (thanks for nothing, Google), sitemaps aren't typically automatically discoverable.