mmmm, it may be legal depending on the country, but it seems unethical and probably isn't worth the risk. You could lose your job, trash your reputation AND maybe end up in court for extortion or deceptive conduct.
There are safer and easier ways to make money from domain names. If you can...