CDI - T1 Safety-Critical Control & Command-Gate Architect M/F

Rely; Guyancourt; On-site; EUR 90,000 - 120,000; Full time

Job summary

Rely seeks a T1 Safety-Critical Control & Command-Gate Architect to define and implement deterministic safety-critical control for drive-by-wire systems. You will own command validation, the command gate, safe-state behaviours, and CDMA-validated access to actuators in collaboration with safety stakeholders.

You will specify software requirements and evidence for independent V&V, integrate envelope limits with Vehicle Dynamics, and address E-stop, link-loss and degraded modes while driving field

Qualifications

• 8+ years in safety-critical embedded software and vehicle control.
• Experience with deterministic-command systems and drive-by-wire.
• Familiarity with safety case development and V&V approaches.
• MISRA-C and real-time constraints experience.

Responsibilities

• Own drive-by-wire control logic, safe-state behaviours, and command-validation implementation.
• Implement command-gate logic validating T2, T3, and certified-application requests before actuator access.
• Integrate deterministic envelope limits provided by Vehicle Dynamics and T1 Lead.
• Define software requirements and evidence needed for independent V&V.
• Analyze field defects and update control behaviour without weakening the safety argument.

Skills

embedded C

real-time software

state machines

MISRA-C

timing & response-time analysis

calm under pressure

collaboration with safety

evidence culture

reliability focus

Tools

MISRA-C tools

Job description

CDI - T1 Safety-Critical Control & Command-Gate Architect M/F

Key objective — Implement deterministic safety-critical control logic and the command gate that arbitrates actuator access.

Mission

Define and implement T1 safety-critical control behaviour. The mission covers drive-by-wire laws, command validation, the command gate, safe states, emergency stop, link-loss behaviour, degraded modes and the evidence that allows independent V&V to verify that T1 remains the final vehicle authority.

• Own drive-by-wire control logic, safe-state behaviours and command-validation implementation.
• Implement command-gate logic validating T2, T3 and certified-application requests before actuator access.
• Integrate deterministic envelope limits provided by the Vehicle Dynamics, Stability & T1 Operational Envelope Lead.
• Specify E-stop, link-loss, degraded-mode and transition behaviours with safety stakeholders.
• Define software requirements and evidence needed for independent V&V.
• Analyse field defects and update control behaviour without weakening the safety argument.

Skills

• embedded C;
• real-time software;
• state machines;
• MISRA-C;
• timing and response-time analysis.
• calm under pressure;
• collaboration with safety;
• evidence culture;
• reliability focus.

Education & experience

8+ years in safety-critical embedded software, vehicle control, real-time control systems or comparable deterministic-command systems.

Success criteria after 12 months

Command-gate software baseline started; safe-state behaviours defined; T1 envelope limits integrated; timing budgets documented; first T1 software baseline ready for independent V&V.