Drive-by-Wire Safety-Critical Controller Architect

Rely; France; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

Rely is seeking a T1 Safety-Critical Control & Command-Gate Architect to design and implement deterministic safety-critical control logic and the command gate that arbitrates actuator access. You will own drive-by-wire control, safe-state behaviours, command validation, and integration of envelope limits, plus E-stop and degraded-mode transitions in collaboration with safety stakeholders.

8+ years in safety-critical embedded software or deterministic-control systems; MISRA-C and real-time

Qualifications

• 8+ years of experience in safety-critical embedded software or deterministic-control systems.
• Strong experience in vehicle control and real-time software.
• Proven ability to define and implement safety-critical control behaviours.

Responsibilities

• Own drive-by-wire control logic and safe-state behaviours.
• Implement command-gate logic validating before actuator access.
• Integrate deterministic envelope limits from Vehicle Dynamics and T1 lead.
• Specify E-stop, link-loss, degraded-mode behaviours with safety stakeholders.
• Define software requirements and evidence for independent V&V.
• Analyze field defects and update control without weakening safety.

Skills

embedded C

real-time software

state machines

MISRA-C

timing and response-time analysis

calm under pressure

collaboration with safety

evidence culture

reliability focus

Education

8+ years in safety-critical embedded software or comparable deterministic-command systems

Job description

CDI - T1 Safety-Critical Control & Command-Gate Architect M/F

Key objective — Implement deterministic safety-critical control logic and the command gate that arbitrates actuator access.

Mission

Define and implement T1 safety-critical control behaviour. The mission covers drive-by-wire laws, command validation, the command gate, safe states, emergency stop, link-loss behaviour, degraded modes and the evidence that allows independent V&V to verify that T1 remains the final vehicle authority.

• Own drive-by-wire control logic, safe-state behaviours and command-validation implementation.
• Implement command-gate logic validating T2, T3 and certified-application requests before actuator access.
• Integrate deterministic envelope limits provided by the Vehicle Dynamics, Stability & T1 Operational Envelope Lead.
• Specify E-stop, link-loss, degraded-mode and transition behaviours with safety stakeholders.
• Define software requirements and evidence needed for independent V&V.
• Analyse field defects and update control behaviour without weakening the safety argument.

Skills

• embedded C;
• real-time software;
• state machines;
• MISRA-C;
• timing and response-time analysis.
• calm under pressure;
• collaboration with safety;
• evidence culture;
• reliability focus.

Education & experience

8+ years in safety-critical embedded software, vehicle control, real-time control systems or comparable deterministic-command systems.

Success criteria after 12 months

Command-gate software baseline started; safe-state behaviours defined; T1 envelope limits integrated; timing budgets documented; first T1 software baseline ready for independent V&V.