Safety-Critical Control & Command-Gate Architect

Rely; Guyancourt; On-site; EUR 90,000 - 120,000; Full time

Job summary

Rely seeks a T1 Safety-Critical Control & Command-Gate Architect to define and implement deterministic safety-critical control for drive-by-wire systems. You will own command validation, the command gate, safe-state behaviours, and CDMA-validated access to actuators in collaboration with safety stakeholders.

You will specify software requirements and evidence for independent V&V, integrate envelope limits with Vehicle Dynamics, and address E-stop, link-loss and degraded modes while driving field

Qualifications

• 8+ years in safety-critical embedded software and vehicle control.
• Experience with deterministic-command systems and drive-by-wire.
• Familiarity with safety case development and V&V approaches.
• MISRA-C and real-time constraints experience.

Responsibilities

• Own drive-by-wire control logic, safe-state behaviours, and command-validation implementation.
• Implement command-gate logic validating T2, T3, and certified-application requests before actuator access.
• Integrate deterministic envelope limits provided by Vehicle Dynamics and T1 Lead.
• Define software requirements and evidence needed for independent V&V.
• Analyze field defects and update control behaviour without weakening the safety argument.

Skills

embedded C

real-time software

state machines

MISRA-C

timing & response-time analysis

calm under pressure

collaboration with safety

evidence culture

reliability focus

Tools

MISRA-C tools

Job description

Rely seeks a T1 Safety-Critical Control & Command-Gate Architect to define and implement deterministic safety-critical control for drive-by-wire systems. You will own command validation, the command gate, safe-state behaviours, and CDMA-validated access to actuators in collaboration with safety stakeholders.

You will specify software requirements and evidence for independent V&V, integrate envelope limits with Vehicle Dynamics, and address E-stop, link-loss and degraded modes while driving field