Software Engineer, OTA Platform

Rivian and Volkswagen Group Technologies is a joint venture between two industry leaders with a clear vision for automotive’s next chapter. From operating systems to zonal controllers to cloud and connectivity solutions, we’re addressing the challenges of electric vehicles through technology that will set the standards for software-defined vehicles around the world.

The road to the future is uncharted. By combining our expertise across connectivity, AI, security and more, we’ll map a new way forward. Working together, we’ll create a future that’s more connected, more intelligent, more sustainable for everyone.

The Over-the-Air (OTA) Platform team builds the software delivery backbone for the vehicle: firmware updates, ECU configuration management, and software/hardware compatibility validation across the vehicle's compute and ECU landscape. The Germany-based OTA engineering group works in close, daily collaboration with the core OTA development team headquartered in Palo Alto, California, extending platform architecture to European vehicle programs and regional ECU suppliers, and representing site-specific requirements back into the global roadmap.

We are looking for a Staff Software Engineer to anchor and grow our Over-the-Air (OTA) engineering capability at our Germany site. In this role, you will own architecture-level decisions for OTA features spanning firmware updates, configuration updates, and software/hardware mismatch handling, working in tight lockstep with the OTA development team in Palo Alto. You will be the senior technical voice for OTA in Germany — driving site development activities, setting technical direction, mentoring engineers, and ensuring the Germany team's contributions integrate cleanly into a single, global OTA architecture.

This role is based in our Berlin office and requires a minimum of three days per week onsite, with occasional travel to other company and partner sites as needed.

• Develop OTA features and services covering firmware update delivery, ECU/software configuration updates, and software-hardware mismatch detection and remediation.

• Collaborate daily with the OTA development team in Palo Alto on system architecture, API contracts, and release planning; ensure Germany-site work streams stay aligned with the global OTA roadmap.

• Design update strategies (full-image, delta/differential, A/B partitioning) that guarantee safe, resumable, and rollback-capable updates across heterogeneous ECUs.

• Define and evolve the software/hardware compatibility (mismatch) framework, including version dependency graphs, pre-condition checks, and campaign eligibility rules.

• Drive interface and contract discussions with cloud/backend teams (campaign orchestration, telemetry ingestion, update eligibility services) to keep vehicle-side and cloud-side assumptions in sync.

• Work with communication protocol stacks used for in-vehicle and vehicle-to-cloud data exchange (e.g., UDS/ISO 14229, DoIP, SOME/IP, CAN/CAN-FD, Automotive Ethernet, TLS/mTLS, MQTT) to integrate OTA services with ECUs and cloud endpoints.

• Ensure OTA processes meet automotive security and safety expectations: secure boot, cryptographic signing/verification, key management, and compliance-oriented practices aligned with ISO/SAE 21434 and UNECE R156 (Software Update Management System).

• Partner with QA, functional safety, cybersecurity, and vehicle integration teams to validate updates through bench, HIL, and vehicle-level testing.

• Support root-cause analysis and resolution of field issues related to update failures, mismatches, or rollback scenarios.

• Take a leading role in architecture reviews and design decisions for the global OTA platform, representing Germany-site needs and…