Functional Safety Engineer

Remote, United States (or overlap with US hours)
· Full-time
· Functional safety

Certus is the Living OS for physical AI. We build AI-native operations for robotics, autonomy, and industrial hardware: safety evidence first, then supply chain and finance on the same record. Models propose, code verifies, and engineers review and sign. Certus can live inside Jama and IBM DOORS, and it can live outside them. Teams do not have to switch. We stand that workflow up with design partners.

Certus is in NVIDIA Inception.

You are the functional safety seat. You sit with a design-partner safety lead, read a real change, and say what the evidence packet has to contain. You review what the models draft, you mark what a safety lead would reject, and you write that back into the product so the next packet is tighter. Certus does not certify the product. Engineers at the customer still review and sign.

• Sit with a design-partner safety lead on one subsystem change.
• Review drafted hazards, requirements, and traces, and mark what is missing.
• Keep the packet tied to the revision under review, in Jama or IBM DOORS or in Certus.
• Tell the founding team which checks the product should run next.
• Help the team get from a draft to a packet a safety lead can sign, in about a week.

• You have practiced functional safety on ISO 26262, DO-178C, or IEC 61508.
• You have written or reviewed a HARA, a safety case, or the evidence packet behind one.
• You can explain a gap to a hardware or software engineer without a lecture.
• You are comfortable saying what you will not sign.
• You are US-based, or you can overlap US hours. Founders are in Portland, New York, and Seattle.

• You have used Jama, Polarion, or IBM DOORS.
• Work in robotics, autonomy, automotive, aerospace, or industrial hardware.
• You have worked next to a software team that ships the tool you use.

You are in the customer conversation and in the packet. When a draft is wrong, you mark it and you write down the check the product should run next. Certus does not certify products.

• 30 minutes with a founder: your safety work, and why this seat.
• 1 hour on a real packet: what you would reject, and what you would ask the product to check.
• 2 days working in the office with the founding team.