CDI - T1 Safety-Critical Control & Command-Gate Architect M/F

CDI - T1 Safety-Critical Control & Command-Gate Architect M/F

Key objective — Implement deterministic safety-critical control logic and the command gate that arbitrates actuator access.

Mission

Define and implement T1 safety-critical control behaviour. The mission covers drive-by-wire laws, command validation, the command gate, safe states, emergency stop, link-loss behaviour, degraded modes and the evidence that allows independent V&V to verify that T1 remains the final vehicle authority.

• Own drive-by-wire control logic, safe-state behaviours and command-validation implementation.
• Implement command-gate logic validating T2, T3 and certified-application requests before actuator access.
• Integrate deterministic envelope limits provided by the Vehicle Dynamics, Stability & T1 Operational Envelope Lead.
• Specify E-stop, link-loss, degraded-mode and transition behaviours with safety stakeholders.
• Define software requirements and evidence needed for independent V&V.
• Analyse field defects and update control behaviour without weakening the safety argument.

Skills

• embedded C;
• real-time software;
• state machines;
• MISRA-C;
• timing and response-time analysis.
• calm under pressure;
• collaboration with safety;
• evidence culture;
• reliability focus.

Education & experience

8+ years in safety-critical embedded software, vehicle control, real-time control systems or comparable deterministic-command systems.

Success criteria after 12 months

Command-gate software baseline started; safe-state behaviours defined; T1 envelope limits integrated; timing budgets documented; first T1 software baseline ready for independent V&V.