Nicolas - Consultant SYSTEMES EMBARQUES

Experience Details:

Functional Safety Assessment (ISO 26262) for virtualization software system at major Tier 2 of system-on-chip (SOC)
chipsets for SAE Level 2 and 3 autonomous vehicle applications.
2020 – 2021
Evaluating the safety cases of various safety elements out of context (SEooC), such as inter-VM communication (IVC) library, virtual machine
monitor (VMM or Hypervisor), and shared memory management (SMMU), at various milestones.
Presenting and legitimating the findings in a lean manner together with the software teams.
Providing recommendations for closure, and evaluating the actual closure of the findings.
Reporting systematic issues to be considered for lessons learned at organization-level.
American multinational technology company, delivering system on a chip (SoC) semiconductor units and artificial intelligence (AI) software for
the automotive market. Santa Clara, California.

Hands-on coaching on Functional Safety Management (ISO 26262) for feature-based development of multiple vehicle
domains of Autonomous and Electric Vehicle (AD, EV), at major Tier 1 supplier of automotive embedded systems (domain
integrator)
2020 – 2021
Author of a Safety Management Strategy, including role models, to ensure the sustained success of functional safety activities to be performed
domain integrator companies (i.e. non-OEM, non-Component-supplier) for autonomous driving and ADAS functions, including a real-time
safety case status tool.
Author of a Functional Safety Concept Model that helps systematize the consistent production of feature-based functional safety concepts,
provides educational guidance to engineers for fast on-boarding into automated driving projects, and ensure the maintenance of FSC quality
across project baselines & vehicle variants. Off-project further adaptation of this model to “Safety First for Automated Driving”.
Author of a CCB procedure at company’s client interface, in order to value the client’s voluminous feedback as a leverage for customer
satisfaction in functional safety activities.
Hands-on coaching and step-wise alignment of roles and responsibilities within the Safety Management team (6+ persons, leading 30+
domain-specific safety experts).
Reviewing the safety management documentation (Safety Plans at various levels, Development Interface Agreement with the client) to ensure
the coverage of the company’s responsibilities, as well as the detailed description of commitments and expectations at the boundaries of
customer-supplier liability boundaries.
Reviewing safety engineering and safety management procedures and templates to ensure the completeness of the project-independent
aspects required by ISO26262 are sufficiently covered.
Development of project-independent procedures and templates (e.g. FSC model, FTA procedure).
Defining and initiating a structured and stakeholder specific verification review process.
Defining and initiating a CCB procedure at company’s client interface.
German multinational mobility engineering and industrial technology company. Stuttgart area, Germany.

Agile Functional Safety of Autopilot (ISO 26262 with LeSS - Large-Scale Scrum) for Software Development of
Autonomous Vehicles at major OEM
2019 – Present
Author of a Convergence Model to ensure the sustained success of functional safety activities to be performed within a Large-Scale Scrum /
Agile framework for autonomous driving autopilot function, leading to the best metrics among all LeSS teams.
Leading the refinement of various LeSS events (i.e. Sprint Planning, Sprint Backlog, Daily, Deliveries and Retrospective). Ensuring the
consistency of the team work by defining the documentation structure and its relationship to the LeSS events. Defining a software safety
methodology that suits Agile software development framework (including its structure, its optimisation, and the execution metrics). Involving
other team members by demonstrating how their natural thinking integrates into the global picture. Providing practical examples on how to
achieve the next steps.
Leading the definition of heuristic hypothesis of the intended functions of data fusion software components, the related intended safety
properties and use cases to be investigated by means of the software safety analysis methodology (which was created for challenging these
properties), in the context of a 3 levels monitoring concept.
German multinational company which produces automobiles and motorcycles. Munich area, Germany.

Dependability by Design for the digitalisation of interfaces to position sensors for automotive applications at Tier 2
supplier of semiconductor products
2019 – Present
Definition a strategic road-map for the design of a generic product for safety application (SEooC), based on SOTIF principles (applied to lower
layers of development).
Product Marketing approach towards target sensor suppliers, system integrators, OEM for the verification of the technical assumptions and
increasing the market awareness. Structuring the assumptions database. Prioritizing the investigations.
Benchmarking technological solutions, including existing digital interfaces (at hardware, protocol and application levels), including evaluation
of competitor's articles.
Designing a specific communication protocol for the digitalisation of the interface to position sensors of safety applications (thus reducing the
wiring costs), and the necessary features to be proposed into the semiconductor product (especially for ensuring the safety of its integration
into an automotive environment).
Austrian company that designs and manufactures advanced sensor solutions for applications requiring small form factor, low power, highest
sensitivity and multi-sensor integration.

Hands-on Coaching on Safety Engineering (ISO 26262) for Powertrain Safety team of Autonomous and Electric Vehicle
(AD, EV), at major Tier 1 supplier of automotive embedded systems (domain integrator)
2019
Derivation of the safety requirements at powertrain level (from requirements from OEM located in China and Silicon Valley), including FTTI
calculation. Allocation to sub-components (including technical negotiation). Design of the safety concept (including functional diagram and
stateflow diagram) at powertrain level, for torque control and charging functions, in the context of a 3 levels monitoring concept.. Set up of a
work breakdown structure in Jira, that encompasses both safety management and safety engineering items in a consistent and progressive way.
On-going development of a combined FTA and ASIL decomposition, with structured relationship to change requests (to sub-components) and
safety argumentation (for the safety case). initiation of an Interface-FMEA for ensuring the safe integration of sub-components.
All the above activities were performed together with client engineers, through multiple, numerous and systematic hands-on coaching sessions.
German multinational mobility engineering and industrial technology company. Stuttgart area, Germany.

Functional Safety (ISO 26262) for semiconductors at major Tier 1 of automotive embedded systems (IP integrator)
2018 – Nov 2018
Review of the semiconductor development process for compliance with ISO26262-11:2018. Organisation of a workshop, to make a deep-dive
into the major challenges encountered by the teams. Creation of a report, including the list of identified deficiencies, their categorisation and
prioritization, and the corrective actions to be taken. Creation of the in-house guideline for the functional safety in semiconductor
developments, with IP integrator perspective. Creation of the training material on functional safety for semiconductor development, for the inhouse trainings of engineers, managers and assessors.
Worldwide supplier of chassis technology for cars, Koblenz, Germany / Detroit, USA

Evaluation of the completion of the safety case acc. ISO 26262 at Tier 2 supplier of automotive embedded software
2018
Inspection of the safety case prior to SOP in the context of a conflict between a Tier 1 company (with industrial culture) and a Tier 2 company
(with engineering services culture), and increasing pressure from the OEM. Creation of a status report (based on facts), together with a
comprehensive corrective action plan (based on the acquired knowledge of the product and the organisation).
Leader in automotive closure system technology, Düsseldorf area, Germany
Provider of engineering and consulting services to well-known OEM and their suppliers, Regensburg area, Germany

Evaluation of the configuration and change management strategy at major semiconductor supplier
2018
Review of the configuration and change management documentation. Creation of a report, including the list of identified deficiencies, their
categorisation and prioritisation, the description of the potential consequences and the corrective actions to be taken. This project improved
the security and the performance of the engineering developments.
German semiconductor manufacturer, providing semiconductor products for use in powertrains (engine and transmission control), comfort
electronics (e.g., steering, shock absorbers, air conditioning) as well as in safety systems (ABS, airbags, ESP). The product portfolio includes
microcontrollers, power semiconductors and sensors., Munich area, Germany

Functional Safety Assessor & Auditor (ISO 26262) at Tier 1 supplier of automotive embedded systems
2017 – 2018
Implementation of the role of internal safety assessor and safety auditor, to drive the development of a company-specific safety culture.
Demonstration of the achieved functional safety, in a systematic and timely manner, based on project evidences. Creation of a Transformation
Strategy, with short / mid / long term objectives. Alignment of the safety assessment strategy with the existing process landscape. Definition of
the scope, applicability, triggers and monthly reporting for the internal safety assessment activity. Constructive criticism of TÜV certification
and validity of safety evidences. Coaching for engineering, development, testing, safety management, project Management.
Multinational manufacturer of automotive brakes and brake components, Paris, France.

Hands-on Coaching on ISO 26262 for OEM-level safety management team (outsourced)
2018
Creating the conditions for sustained success of safety activities. Creating functional safety procedures. Providing each person with knowledge
of ISO26262, hands-on experience on the relevant work product, hands-on experience on writing procedures, hands-on experience on vehicle
projects / automotive systems engineering, understanding of the industrial engineering environment, understanding of the constraints of an
engineering service company. Person-centered approach to find the adequate granularity and timing to get necessary management support
(i.e. grow a unified safety culture).
Munich, Germany - Engineering services in the fields of system integration and system support for mobility

Functional Safety (ISO 26262) for a hypervisor that creates and runs virtual machines (virtualization)
2017
Analysis of the assumptions of use of the hypervisor for ensuring the safe execution of safety-relevant applications in the context of
virtualization (i.e. multiple different operating systems to be integrated into one system). Creation of the structure of the safety case report,
including the criteria for freedom from interference.
High-tech company specializing in embedded automotive software for cockpit solutions. Acquired by Panasonic in 2017. Berlin, Germany

Functional Safety Manager (ISO 26262) at major Tier 1 supplier of automotive embedded systems
2014 – 2017
Implementation of the role of Safety Manager at Tier 1 supplier, for 7 application projects of 3 OEMs. Creation of the safety cases, in
accordance to ISO 26262, VDA 305-100, company policies, and project-specific customer requirements. Moderation of risk assessment
(Judgment of functional safety). Leading the project teams and engineering teams in the journey towards sustained success of the functional
safety activities (including successful customer safety assessments at SOP). Moderation of Lessons Learned for Continuous Improvements.
Hands-on coaching for engineering, development, testing, safety management, project Management.
Worldwide supplier of chassis technology for cars, Koblenz, Germany / Paris, France / Tokyo, Japan / Detroit, USA

Functional Safety (ISO 26262) studies for various Engineering Services companies
2013
Worked together with engineering service companies to jointly position niche services at their clients.
Segula Technologies - Segula Technologies is a French engineering group with 11,000 employees in 28 countries.
Amaris - Amaris is an international management and technology consulting group founded in 2007.
Applus Services - Applus Services, based in Barcelona, Spain, is a listed international inspection, auditing and certification company.

Expérience professionnelle

Embedded systems integration expert
Senior consultant & advisor – Freelance contractor


Wide exposure to the best practices followed by global OEMs in the E/E domain.

Versatility & Innovation:
- International / multicultural environment
- OEM / Suppliers
- Prototype / System / Component
- Design / Development / Validation
- Delivery mode (technical target + deliverable + cost + time)

Expertise & Best practices
- Embedded electronics systems experience (chassis, body & comfort, powertrain, infotainment)
- Industry Standards / OEM Corporate Standards
- R&D (model-based design, E/E architecture, software design)
- Frameworks customization / integration
- Test benches (ECU, system, prototype)

Advisory & Consultancy
- Solutions for clear cut problems
- Early-warning about emerging problems
- Problems-definer, simplifier & solver
- Pros and cons identification
- Quality assurance


Co-founder, Director Apeec Solutions Barcelona, Spain
2012 - Present

Providing technical solutions for decision-makers

Reviews & Audits:
- Third-party audits before acquisitions
- Vehicle prototype inspections
- Production Lines & Garages walk-throughs & audits

Business Solutions:
- Pilot projects for feasibility studies
- Vehicle cost & time-to-market reduction programs
- Third-party quality assurances

Engineering Platforms:
- Systems design & development platforms
- Technical Reviews for systems modifications
- Integration testing platforms

Skills Development:
- Team workshop for vehicle design walk-through
- Team qualification
- Specific trainings (on-demand)


Automotive Embedded Systems Consultant with NSI, ALTRAN & IDIADA
2004 - 2011

2012 Diagnostic Department set up PROTON (OEM) K. Lumpur, Malaysia
Project context:
This OEM was facing issues in Production and After-Sales that could affect its reputation. We identified the relatively recent introduction of E/E architectures in their vehicles to be the root cause of this issue. Our solution was to help in increasing the strength of their Diagnostic Department.
Audit:
- Context: After-Sales workshops, Production lines, Engineering and Diagnostic departments (SWOT)
- Content: Context analysis, target definition, organisation proposal (skills, responsibilities), process assessment (SPICE, ISO15504), documents organisation, documents content (including general specifications, ECU specifications, diagnostic databases), tools definition
Design:
- Targets: Adapted from our experience of the State of the Art to their situation (SMART format)
- Organisation: Adapted from our experience of the State of the Art to their situation (RASIC format)
- Process: Adapted from our experience of the State of the Art to their situation (SIPOC format)
- Diagnostic Specifications: Document organisation, redesign (including diagnostic databases)
- Tools definition; Adapted from our experience of the State of the Art to their situation (FURPS format)
Quality:
- Design: according to standard quality methods (SWOT, SMART, RASIC, SIPOC, FURPS)
- Experience feedback: ISO9001 / PDCA
Implementation:
- Training: Training of the team on customer site (Malaysia) regarding the Diagnostic targets, organisation, processes, documents and tools.
Deliverables:
- Gap Analysis report
- Diagnostic Department organisation
- Internal + Interdepartmental processes (Diagnostic, Engineering, Production, After-Sales)
- OEM Standard Diagnostic specifications (Services, Transport Protocols, Databases, Material)
- ECU Diagnostic specifications (Services, Transport Protocols, Databases, Material)
- Diagnostic Tools benchmarking
- Training material

2011 E/E Architecture Gap Analysis + GMLAN conformity CATARC / SGMW (OEM) Liuzhou, China
Project context:
CATARC, a Chinese service company had written standard specification for Wuling a Chinese OEM (joint venture between SAIC and General Motors) according to GMLAN standards. Starting from a GMLAN conformity check, we performed a full E/E Gap Analysis with a cross-layer point of view.
Design:
- Gap Analysis of Specifications: GMW3122, GMW3104, GMW3110, GMW8762
- Requirement Specifications: Document organisation, redesign (including DBC + LDF files)
- Development process Gap Analysis; from our experience of the State of the Art
Validation:
- Gap Analysis of Test Specifications: GMW15565
Training:
- GMLAN: Training of the Electronics team (10 people) on customer site (China)
Deliverables:
- GMW3122, GMW3104, GMW3110, GMW8762, GMW15565 Requirement Engineering file
- Architecture review
- Cost optimization hints

2011 CAN and LIN integration PROTON (OEM) K. Lumpur, Malaysia
Project context:
In a strategic OEM project we were in charge of reviewing and defining the CAN and LIN Specifications and Test Process. Skill transfer should take place in order to introduce the Customer team to these new specifications and their organisation.
Design:
- Active Gap Analysis of Specifications (Gap Addressing): CAN & LIN Physical and Data Link layers, Failure Modes, Network Management
- Requirement Specifications: Document organisation, redesign (including DBC + LDF files)
Validation:
- CAN & LIN Test Specifications: Gap analysis, complete redesign
- CAN & LIN Integration Test Bench: Gap analysis, redesign, set up, scripts development (CANoe, Capl)
- CAN & LIN Test Conduction: on bench (manual / automatic) and on vehicle (at Proton Malaysia)
Training:
- CAN and LIN Training: Training of the Electronics team (30 people) on customer site (Malaysia)
Deliverables:
- CAN & LIN requirement specification
- CAN & LIN validation structure definition
- CAN & LIN validation plan and Tests
- Tests reports
- CAN & LIN training

2011 PSSB (Push Start Stop Button) PROTON (OEM) K. Lumpur, Malaysia
Project context:
This function was a new implementation for the client, so he asked our support during the design phase. Our targets were to analyse the functionality, make a gap analysis of the specification and validate this function inside the car. This function involves several ECUs, arbitration processes, human interaction and power management.
Design:
- Gap Analysis: Customer specifications and process
- Requirement Specifications: System (PSSB) and Functional (Power Management) approaches
Validation:
- Write validation plan: Oriented to the function and the compatibility of this function in the car. Conducted at Design level and also at Final user point of view
Training:
- FMEA on PSSB Workshop: Training of the Electronics team (30 people) on customer site (Malaysia)
Deliverables:
- FMEA (Failure Modes and Effects Analysis)
- Validation plan and Tests Specifications

2011 Fault Injection on Electronic Gear Shifter Lever SL Corporation (Tier1) Seoul, Korea
Project context:
For its final customer (Hyundai), this OEM supplier needed to validate an Electronic Gear Shift Lever, fitted in a vehicle. So we developed a test plan to verify that the system was conforming to the FMEA that we previously realised. We also developed the validation tool (Break Out Box, see previous experience). The tests should be conducted in the final customer’s vehicle (Hyundai).
Design:
- Process Definition (Test area identification through Fault Tree, criteria definition, tool definition)
Validation:
- Writing Test Specification (Reverse FMEA method) for functional misbehaviour (limp home + recovery)
- Tool development: Specification of an enhanced break out box, development of the GUI (HMI)
Deliverables:
- Fault Tree of the function
- Functional analysis of the system
- Validation plan and Tests Specifications
- Tests report

2011 Enhanced Break Out Box for Fault Injection SL Corporation (Tier1) Seoul, Korea
Project context:
For its final customer (Hyundai), this OEM supplier needed to validate an Electronic Gear Shift Lever, fitted in a vehicle. Hence we had to create the adapted validation tool. This tool had to be embedded in the car as a Break Out Box. This Break Out Box had to be piloted by a computer in order to apply any type of fault on each of the ECU Pins. The validation had to be conducted on the car at a Single ECU level.
Design:
- Tool + Process Definition: HW and SW definition - Embedded Automatic Test Bench approach
- Tool development: Development of the GUI with Labview (HMI)
Validation:
- Validation of the tool with operator point of view
Deliverables:
- Tool Specification
- GUI (HMI)

2010 ABS/ESP Diagnostics BOSCH (Tier1) Abstatt, Germany
Consulting context:
As a member of the International Bosch Specification Team (India, Germany and US), I was in charge of ABS/ESP Diagnostic Communication requirement engineering for a GM mini-van project. Hence I evaluated each statement of the OEM Generic Specifications and determined their applicability to the project. I also had to manage and integrate the specific OEM demands. For this particular project, I coordinated the implementation and tests of the ABS/ESP Diagnostic Communication component.
Design:
- Requirement Engineering (Doors, Candela) on General Motors GMLAN (GMW3110, GMW3104)
- Writing of the ABS/ESP project specific Diagnostic Communication specification
- Tracking specification incoherencies
- Coordination of the implementation and tests (India / Germany / Australia / USA)
Validation:
- Code reviews of Diagnostic Communication component implementation
- Component level test scripts definition
- Test conduction on Labcar test bench
Deliverables:
- ABS/ESP Diagnostic Communication specification dedicated to a specific Opel project
- Test Plan (Component level)

2010 International Department Strategy NSI India
Project context:
Dedicated to specific clients as Technical Leader, I managed the technical relationship and improve propositions for solution.
Deliverables:
- Generate work package
- Support report
Client relation:
- Customer interface for RFQ details and work packages presentation at TATA MOTORS and MAHINDRA

2009 Gap analysis MAHINDRA (OEM) Nasik, India
Project context:
The target of the OEM was to build a SUV adapted to the US market. Hence the requirements of the car had to be compliant to US norms and US customer’s habits. The project was to define different situations in a final client approach, then assess the system reactions. We focused on tracking the erratic system behaviour and the incoherent customer interactions. In general project aspect, we also were involved in evaluation of the general Electronic development process.
Design:
- Functional and Test Specifications definition
- V-Cycle project definition
- Technical quality project evaluation
Validation:
- Test methods review and redesign
- Writing of functional tests cases (vehicle level)
- Conduct test on prototype (on customer site in India) – 5 ECUs, 15 functions
Deliverables:
- Gap Analysis on specification
- Validation plan
- Test results

2009 International Department Strategy NSI Levallois, France
Project context:
NSI International department wanted to develop activities and create proposals for clients (OEMs, Suppliers). I was involved as Technical Leader to create client proposition and strategy.
Deliverables:
- Work packages
- Support report
Client relation:
- Creation of technical solutions for customer RFQ (Automatic Test Bench, Reverse Engineering)
- Presentation of work packages on customer site

2008 Reliability Process TATA MOTORS (OEM) Pune, India
Project context:
TATA MOTORS wanted to evaluate and validate the robustness of its Electronic architecture. To create this evaluation we proposed to implement an Electronic reliability improvement process. As the SOP date was close, we offered to perform in-vehicle Single ECU and Functional tests. The second phase of the project was to actually integrate the Electronic Reliability Process to the existing Mechanical Reliability Process. This included the realization of a Mechatronics Vehicle Bench and the creation of reliability tools (Failure management, statistics). Training of Indian team was a big part of this project.
This project was a validation Turn Key project, located in India.
Design:
- Design / Define the Vehicle Integration Bench
- Build the bench
- Validate the bench
Validation:
- Setting up of Embedded Electronics Reliability process
- Gap analysis: Functional and Test Specifications, V-Cycle and validation methods review and redesign
- Mechatronic integration test bench: conception, realisation monitoring
- Write tests cases (Single ECU level, Vehicle level, Customer approach)
- Conduct tests on the Prototypes and on the Vehicle Integration Bench
Training:
- Process transfer to Indian teams
- Tools transfer to Indians teams
- Deliverables and tests cases transfer to Indian teams
Deliverables:
- Vehicle integration Bench
- Vehicle functional list definition
- Electronic Reliability Process documents
- Single ECU test description (10 ECUs)
- Single ECU test execution
- Functional test description (25 functions)
- Global CAN and Functional performance estimation
- Vehicle malfunction analysis
- Generate Tests Scripts and results
- Training and technology transfer

2008 Power Management sub functions Conception RENAULT (OEM) Technocentre, France
Consulting context:
As a member of Renault Functional Modelling team, I was in charge of:
- Checking the coherency of the Functional Specifications (Gap Analysis)
- Creating a Technical architecture (Functional analysis: Function = Inputs + Outputs + Computation)
- Writing the software specifications
- Developing the models in MATLAB SIMULINK
Deliverables:
- Software specifications
- Stop & Start, Starter Protection and Battery Gauges models with MATLAB SIMULINK

2007 Vehicle Test Benches Automation PSA (OEM) Belchamp, France
Consulting context:
As a member of PSA Vehicle Test Bench Validation team, I was in charge of:
- Instrumentation of pre-serial vehicles (Actuators, sensors, …)
- Calibration of the tests to adapt them to the vehicle under test
- Design of Test Scripts to reproduce rare or intermittent failures that have been observed in after-sales, either from a record or from a customer description. Development in Labview, Teststand and Capl.
- Robustness automatic tests (random and targeted cycles, during several days)
- Maintenance and improvement of existing scripts
- Maintenance and improvement of existing benches (creation of libraries, primitive functions, …)
- Creation of a work process
- Results analysis
Domains:
- Power Management
- Network Management, focused on transitional phases
- Windows Winding and Rear View Mirrors
- Anti-theft (immobilizer)
- CAN and LIN
Vehicle segments:
- Middle class passenger cars (segments B, C, D, H1 and mini-vans)

2006 Single ECU Test Bench BITRON (Tier1) Torino, Italy
Project context:
PSA required BITRON to improve the reliability of their Windows Winding and Rear View Mirrors ECU.
This project was dedicated to a Single ECU test bench. Target of the project were to design the bench, build it and apply Validation process. This project started from scratch.
Design:
- Conception and realisation of a full automatic HIL test bench with CANoe (Capl) including HMI
Validation:
- Writing of the Tests Specifications and Scripts (Functional and Low Layers)
- Validation of the Windows Winding and Rear View Mirrors (including CAN and LIN)
- Conduct the tests, generate report
Deliverables:
- Test Specifications (Functional and Low Layers)
- Full automatic HIL Single ECU Bench (Material + Test Scripts)
- Test Results and Analysis

2005 After-sales Diagnostic Tool on Pocket PC NSI R&D Versailles, France
Project context:
NSI R&D department asked for a Pocket PC Diagnostic tool. All the design and the realization should be defined. This project started from scratch.
Design:
- Design and realisation of generic diagnostic communication database
- Development of a diagnostic database management tool in Embedded Visual Basic
- Development of the diagnostic tool applicative layer and the HMI in Embedded Visual C++
Deliverables:
- General Specifications with final user perspective
- Software specifications
- Diagnostic database management tool + generic diagnostic communication database
- Pocket PC application software

2004 Power Management on Hybrid Vehicles Magnetti Marelli (Tier1) Salerno, Italy
Project context:
To be ready for Hybrid vehicle Magnetti Marelli started to improve Hybrid systems. This project was managed by R&D department.
Design:
- Development of a battery consumption prediction model with MATLAB SIMULINK
- Inputs: Torque demand and Angular Speed demand – Output: Battery consumption demand
Deliverables:
- DC-DC model
- DC-AC (Inverter) model
- 3 phases asynchronous motor model