This role is currently open. See the open role on FSTalent.
Hover or focus an underlined term for a plain-language definition.
Responsibilities
- Lead the end-to-end safety certification process: gap analysis → certification body selection & management → technical file → type testing → certificate
- Audit vendor hardware safety manuals to confirm certified scope supports the Company's system safety certification
- Architect the safety envelope for people-sensing software — supervision, plausibility checks, diagnostics, safe-state logic that stays alive independent of the AI subsystem — and its integration path to the customer's machine via safe I/O and fieldbus protocols
- Build and maintain our functional safety management system and software safety lifecycle (coding standards, traceability, tool qualification)
- Produce the quantitative safety case (FMEDAFailure Modes, Effects and Diagnostic Analysis: quantitative failure analysis producing safe/dangerous failure rates and diagnostic coverage. Read more, diagnostic coverage, failure-rate analysis) and full documentation set (requirements specs, architecture docs, V&V plans), including the downstream safety manual for integrator customers
- Define safety goals, concepts, and cases — covering functional failure (PLd/SIL2) and functional insufficiency (SOTIFSafety Of The Intended Functionality: absence of unreasonable risk from functional insufficiencies or foreseeable misuse, per ISO 21448. Read more) — in collaboration with the algorithms, software, and product teams
- Support integration, commissioning, and maintenance of safety systems, including customer-site travel
Requirements
- 5+ years safety-critical systems or embedded software experience, incl. 2–3 years functional safety
- MSc in Computer Science, Electrical/Electronics Engineering, or related field — or equivalent practical experience
- Direct experience taking a product through an independent certification body (Notified Body, TÜV, UL, exida, or equivalent) from technical file to certificate — owned, not just supported; comfortable representing the Company to auditors and leadership
- A safety-first architectural instinct — you design for failure, reason in worst-case rather than average behavior, and know how to hold a system in a safe state when something breaks
- Experience with functional safety standards such as IEC 61508Functional Safety of E/E/PE Safety-Related Systems. The umbrella functional safety standard defining the safety lifecycle, SILA discrete level (SIL 1 to SIL 4) specifying the required risk reduction and dependability of a safety function under IEC 61508 and its sector standards. Read more levels, and requirements for electrical, electronic, and programmable systems. Read more, ISO 13849, ISO 21448SOTIF - Safety of the Intended Functionality. Addresses hazards from functional insufficiencies and foreseeable misuse in autonomous and driver-assistance systems. Read more (SOTIF), or similar frameworks
- Strong C/C++ and Python, with familiarity with embedded/edge environments (ARM, Linux, RTOS)
- Hands-on experience interfacing software with hardware — I/O, controllers, or fieldbuses — from any safety-critical domain (robotics, industrial automation, aerospace, medical devices, etc.)
- Comfortable with occasional on-site travel for commissioning and audits
Nice to have
- Direct IEC 61496 (ESPE) experience — light curtains, laser scanners, vision, or radar, across any Part
- CFSE/CFSP certification (TÜV, exida, or equivalent)
- Experience managing a certification body relationship directly, not just supplying documentation to someone else running it
- Practical experience with industrial safety fieldbus protocols and safe I/O integration with robot/PLC controllers
- Experience producing safety documentation (FMEAFailure Modes and Effects Analysis: a bottom-up method cataloging how components fail and what effects those failures produce. Read more, DC analysis, V&V test plans)
- Working knowledge of MISRA-C, safety-rated MCUs, edge-AI SoCs/GPU platforms, or deeper embedded RTOS experience
Standards
- IEC 61508 Functional Safety of E/E/PE Safety-Related Systems
- ISO 13849-1 Safety-Related Parts of Control Systems
- ISO 21448 SOTIF - Safety of the Intended Functionality
Use this template
Get the Word document, or let CSA scope, staff or post the role for you.