BMS Architect - High-Voltage EV Systems Lead

Ford Motor

Dearborn (MI)

On-site

USD 87,000 - 166,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical coverage

Vehicle discount program

Tuition assistance

Paid time off

Job summary

Ford Motor Company is seeking a Battery Management System (BMS) Architect to own the technical architecture, requirements, and verification strategy for high-voltage BMS across Ford's advanced battery programs. You will define interfaces, allocate system requirements, and guide suppliers to ensure robust performance in normal and fault conditions.

You will lead architectural trade studies, verification planning, and safety/cybersecurity concepts, coordinating with hardware, software, and

Qualifications

Bachelor’s degree in Electrical, Electronics, Computer, Mechatronics, or Systems Engineering.
6+ years in embedded electronic control system development, including 3+ years on battery management or comparable high-voltage electrical systems.
Deep proficiency in high-voltage battery systems: cell chemistries and their behavior, series-connected string architecture, charge and discharge hardware, isolation monitoring, sensing accuracy, and interlock strategy.
Demonstrated ownership of system architecture and requirement decomposition on a production program, including requirement release to multiple suppliers or programs.
Demonstrated experience defining verification methods and acceptance criteria, not requirements alone.
Working familiarity with functional safety and cybersecurity process standards for embedded control systems— ISO 26262 or IEC 61508, and ISO/SAE 21434 or IEC 62443.
Ability to read SysML architecture models and Simulink or equivalent behavioral models.
Fluency in requirements management and traceability tooling.
Experience leading technical design reviews with suppliers and presenting to senior management.
Ability and willingness to travel occasionally.

Responsibilities

Own the BMS architecture and the functional allocation, partitioning, and design rationale across its components and control levels.
Own product attribute requirements - usable energy, power and current capability, charge and discharge rate, efficiency, and service life - and allocate them into system, subsystem, and component requirements.
Decompose customer, safety, and program requirements with bidirectional traceability; author and release requirement sets across multiple concurrent programs and suppliers, maintaining a common core with program-specific variants.
Define operating states and transitions, and the fault handling architecture covering detection, classification, propagation, annunciation, and recovery.
Define the internal communication architecture, including message sets, timing budgets, and degraded-mode behavior.
Define measurement and accuracy requirements for voltage, temperature, current, and isolation, and allocate error budgets across the sensing chain.
Own architectural trade studies and document decisions, alternatives, and rationale.
Own the design verification strategy and ensure full verification coverage of released requirements, with methods assigned by requirement class.
Define acceptance criteria, test method, level of test, instrumentation, and evidence to be retained; allocate requirements to analysis, simulation, bench, subsystem, or full-system verification.
Own requirement-to-verification-to-result traceability and its completeness at each program gate.
Review and disposition verification results against acceptance criteria; approve deviations, retests, and resulting requirement changes.
Define verification methods for supplier-executed testing and review returned evidence for method conformance and sufficiency.
Interrogate test, bench, and field data to assess design performance and close issues to root cause.
Author and maintain interface control documentation to thermal, power electronics, safety and protection, and higher-level control systems, including software-visible signals, diagnostic, and calibration interfaces.
Own the functional safety concept to ISO 26262: hazard analysis and risk assessment, integrity level allocation, safety mechanism specification, diagnostic coverage targets, and the safety argument; support FMEA, FMEDA, and safe state definition.
Author cybersecurity requirements in partnership with the owning cybersecurity organization, aligned to ISO/SAE 21434, and cascade them to suppliers.
Lead architecture and design reviews with internal teams and suppliers; adjudicate technical deviations and concessions.
Provide technical direction to hardware, software, controls, and validation engineers, and act as escalation for cross-domain design conflicts.
Present architecture status, technical risk, and recommendations to senior management