Codex Corp
Inquiries

Projects The whole catalogue Status stated

The group's work, and the record it is built on.

Dream Codex, the first Codex Labs product, is built and launching. Beside it sit client work from the operating companies and the group's own five sites, then the founder's own infrastructure record from enterprise roles, never presented as the group's. Where something is built but not yet live, it says so.

See the work Send an enquiry

01
The work

The whole catalogue, in one place.

Codex Corp builds nothing itself, so every piece here says who made it. Dream Codex and the client work come from the operating companies, and the five company sites are the group's own. The founder's record is infrastructure work from enterprise roles, some of it from before the group existed: the experience Codex Systems is built on, not work the group delivered. Open any of them for the full account and a look around.

Product

Dream Codex

A dream journal for Android, web and desktop. Capture on waking, sleep tracking, and a picture of what recurs.

Codex Labs’ first product, and the one the group uses to prove the pipeline works end to end. Voice capture on waking, because nobody types at three in the morning. Generated imagery for each entry through Cloudflare Workers AI. Sleep tracking, streaks, and a view of the symbols that keep coming back. It runs from one codebase on Android, on the web, and as a desktop build, with Supabase behind it and the whole delivery path automated. Built and running; the public launch is still ahead of it.

Role
Founder, engineer, designer
Year
2026
Built with
React Native, Expo, Supabase, Cloudflare Workers AI
Status
Built, launching soon
labs.codexcorp.ca

Client work

Sharry Minhas

A realtor site led by commercial work, with a live listing feed pulled from the brokerage.

A RE/MAX realtor whose commercial work was buried under residential listings, so the site leads with commercial and lets residential follow. Dark by default, which is not where most realtor sites start. The listings are not screenshots: a Pages Function pulls the live office feed so the page is current without anyone maintaining it.

Role
Design and build
Year
2026
Built with
Static HTML, Cloudflare Pages, Pages Functions
sharryminhas.com

Client work

ISCBC Fishing Game

An educational browser game teaching native, invasive and at-risk fish identification.

Built for the Invasive Species Council of British Columbia to sit inside their WordPress site. You fish, you identify what you caught, and you learn which species belong in the water and which do not. Responsive and touch-first so it works on a phone at a public event, with audio, side quests and a tutorial that does not lecture. Finished and passing its quality gate; not published yet.

Role
Design and build
Year
2026
Built with
TypeScript, Vite, Canvas, WordPress embed
Status
Built, not yet published

Founder’s record

Secure Score, 52 to 90

Raised a fleet of 1,000+ nodes from a Secure Score of 52 to 90, cutting ransomware exposure by around 40%.

Secure Score is a blunt number, but it is the one an executive reads. Getting it from 52 to 90 meant enforcing Attack Surface Reduction rules and rolling Defender for Endpoint EDR across more than a thousand nodes without breaking the line-of-business software those nodes exist to run. The endpoint estate was aligned to ISO 27001 baselines at the same time: BitLocker, Secure Boot, and compliance policies that actually block rather than warn.

Role
Sr. Cloud Architect
Year
2026
Built with
Defender for Endpoint, ASR rules, Intune, Entra ID

Founder’s record

Zero-touch provisioning

Rebuilt device setup for 1,000+ Windows endpoints, taking provisioning from four hours to under 30 minutes.

Imaging a laptop by hand is four hours somebody is not doing their job. This replaced it with a user-driven Autopilot flow and an Enrollment Status Page profile, so a machine can be drop-shipped to a person and be ready in under half an hour. Behind it sits a five-ring Autopatch strategy holding 98% compliance on quality updates within seven days, and PowerShell that recovered 200+ endpoints which had fallen out of management entirely.

Role
Sr. Cloud Architect
Year
2026
Built with
Windows Autopilot, Intune, Windows Autopatch, PowerShell

Founder’s record

Retiring the print servers

Moved 100+ print queues into Azure Universal Print and retired the legacy print server estate.

Print is the least glamorous thing in an IT estate and one of the most expensive to keep limping. Migrating more than a hundred queues to Azure Universal Print through Azure connectors removed the dependency on the legacy print servers and their proprietary licensing, worth about $25,000 a year in operating cost, and moved queue management to the same console everything else is managed from.

Role
Sr. Cloud Architect
Year
2026
Built with
Azure Universal Print, Azure connectors, Intune

Founder’s record

Hub and spoke network

Architected a hub-and-spoke topology joining on-premises appliances to Azure over IKEv2 IPSec.

A hub-and-spoke topology integrating on-premises Cisco Meraki appliances with Azure VPN Gateways over IKEv2 IPSec tunnels, with routing tuned for under 20ms access to cross-tenant SQL instances. The same programme launched a new site end to end: Meraki MX84 firewalls and Ubiquiti CloudKeys, full layer two and three configuration in-house, 99.9% uptime, and roughly $15,000 of managed-service labour avoided.

Role
Sr. Cloud Architect
Year
2026
Built with
Azure VPN Gateway, Cisco Meraki, IKEv2 IPSec, Azure Monitor

Founder’s record

Identity lifecycle automation

Automated the joiner, mover and leaver lifecycle so a new hire has the right access on day one and a leaver has none.

Joiner, mover and leaver done by hand is where access quietly accumulates: people keep permissions from roles they left years ago, and nobody notices until an audit. Automated JML workflows in PowerShell and Power Automate now provision and de-provision across Entra ID, Active Directory and Okta, cutting manual intervention by 40% while giving new staff day-one access. A centralised identity store governs the accounts, dormant ones are decommissioned rather than left, and group ownership has clear boundaries.

Role
Manager, IT
Year
2025
Built with
Entra ID, PowerShell, Power Automate, Conditional Access

Founder’s record

SCCM to co-management

Moved 1,000+ endpoints from standalone SCCM into Intune co-management, in waves, with no reimage.

Standalone SCCM works until the fleet stops being in one building. Moving more than a thousand endpoints into Intune co-management was done in waves, with workloads shifted one at a time so a rollback was always a switch rather than a rebuild, and without reimaging a single machine. Alongside it, a PowerShell packaging factory automated wrapping and detection logic for more than fifty complex applications.

Role
Sr. Cloud / Systems Engineer
Year
2024
Built with
SCCM, Intune, Entra ID, PowerShell

Founder’s record

Enterprise Windows 11 rollout

Planned and ran an enterprise-wide Windows 11 deployment on one standardised image.

An operating system upgrade is only partly a technical problem. The build was one standardised image driven by SCCM task sequences, with driver and application packaging automated through the PSAppDeploy Toolkit so that the thousandth machine came out the same as the first. Doing the packaging properly is what makes the rollout boring, and boring is the goal: nobody should be able to tell which wave they were in.

Role
Sr. Cloud / Systems Engineer
Year
2024
Built with
SCCM Task Sequences, PSAppDeploy Toolkit, Intune, PowerShell

Founder’s record

Active Directory modernisation

Upgraded the domain controllers to Server 2022 and audited over 500 Group Policy Objects down to a consolidated set.

On-premises directories accumulate. Domain controllers were brought from Windows Server 2016 to 2022, and more than five hundred Group Policy Objects were audited and consolidated, which is mostly the unglamorous work of finding out what each one was for and who still needs it. The Entra Connect sync topology was strengthened at the same time, because a directory that is current on one side and stale on the other is worse than either.

Role
Sr. Cloud Architect
Year
2026
Built with
Windows Server 2022, Group Policy, Entra Connect, PowerShell

Founder’s record

Multi-site forest consolidation

Consolidated several separately managed Active Directory domains into a single unified forest.

Several domains, each managed by different people to different standards, is several sets of assumptions about who should have access to what. Consolidating them into one forest meant a migration plan written before anything moved, trust relationships configured deliberately rather than inherited, and role-based access controls applied on the way in so the new forest did not start life carrying the old one’s exceptions.

Role
Systems Analyst
Year
2018
Built with
Active Directory, Domain trusts, RBAC, Windows Server

Founder’s record

Cross-platform patch automation

One patching framework across Windows and macOS, reaching 100% compliance within 30 days.

Two operating systems patched by two different processes means two different answers to the question of whether the fleet is current, and the honest answer is usually neither. A single centralised framework across SCCM and Intune covers Windows and macOS together, reaching full compliance within thirty days. The number that matters is not the peak but the fact that it is measured the same way on both platforms.

Role
Sr. Cloud Architect
Year
2026
Built with
SCCM, Intune, Windows, macOS

Founder’s record

Identity disaster recovery

Disaster recovery for the identity estate itself, with a recovery time objective under four hours for Tier-0 assets.

Most disaster recovery plans assume the directory is there to authenticate against. If the domain controllers and the Entra Connect servers are the thing that is gone, everything downstream is unreachable no matter how well it was backed up. This planned for that case specifically: a recovery time objective of under four hours for Tier-0 assets, automated backup, and rehearsed rapid-restore procedures so the global identity store survives ransomware or a catastrophic failure rather than being restored from a document nobody has tested.

Role
Sr. Cloud Architect
Year
2026
Built with
Entra Connect, Domain Controllers, Azure Backup, PowerShell

Company site

Codex Corp

The holding company. One point of entry for four operating companies, with every service floor published.

The holding company site, and the argument the whole group rests on: one entry point, four operating companies, and a starting price published for every service line rather than hidden behind a form. Static HTML on Cloudflare Pages, deployed from the same monorepo and the same workflow as the other four.

Role
Founder, designer, engineer
Year
2026
Built with
Static HTML, Cloudflare Pages, GitHub Actions
codexcorp.ca

Company site

Codex Studios

The production house. Photography, cinematic video and certified aerial work.

The production company: photography, cinematic video, and certified aerial work. The site has to carry image quality without carrying image weight, which is most of the engineering in it.

Role
Founder, designer, engineer
Year
2026
Built with
Static HTML, Cloudflare Pages, GitHub Actions
studios.codexcorp.ca

Company site

Codex Digital

The design company. Brand identity, marketing creative, product interface and motion as one system.

The design company, where brand identity, marketing creative, product interface and motion are treated as one system rather than four contracts. The site is the argument for that, so it has to hold together as one thing.

Role
Founder, designer, engineer
Year
2026
Built with
Static HTML, Cloudflare Pages, GitHub Actions
digital.codexcorp.ca

Company site

Codex Labs

The software company. Web and mobile applications, platforms, APIs and games.

The software company: web and mobile applications, platforms, APIs and games. It is the one that ships products rather than engagements, which is why Dream Codex lives under it.

Role
Founder, designer, engineer
Year
2026
Built with
Static HTML, Cloudflare Pages, GitHub Actions
labs.codexcorp.ca

Company site

Codex Systems

The infrastructure company. IT, cloud architecture, delivery pipelines, security posture and AI.

The infrastructure company, and the one closest to the founder’s day job: IT, cloud architecture, delivery pipelines, security posture and AI. The founder’s record in this catalogue is the experience Codex Systems is built on, not work it has delivered.

Role
Founder, designer, engineer
Year
2026
Built with
Static HTML, Cloudflare Pages, GitHub Actions
systems.codexcorp.ca
02
Next

Bring the one that is hardest to scope.

Work that crosses more than one discipline is the reason the group is shaped this way. Start there.

Send an enquiry See how pricing works