Summary
Technical product and engineering leader in safety-critical embedded software and secure systems (DO-178C/DO-331, DAL-C/D). Lead multi-project delivery in EASA/DOA environments, including PSAC ownership and audit readiness. Built and scaled engineering teams and operating models (processes, toolchain qualification, CI/CD) and drove cross-functional alignment across hardware, safety, certification, and programme teams. Executive MBA (EPFL, 2025).
Experience
H55 SA · Sion, Switzerland
Spin-off of the Solar Impulse project — leading player in electric aviation propulsion, on track to become the first company to obtain EASA certification for an electric propulsion system.
- Recruited and onboarded 6 SW engineers, scaling the team from 2 to 8 in 3 years; defined onboarding processes and structured team organisation.
- Developed and implemented 5 SW processes and standards (configuration management, development & verification) compliant with DO-178C/DO-331, validated by EASA under DOA.
- Authored all PSACs for 4 SW projects; led successful SOI-1 ×2 and prepared for SOI-2 audits with EASA.
- Led development of 4 safety-critical embedded SW (DAL-C/D) for ESS & EPU, in parallel with system and hardware development.
- Introduced Model-Based Design to accelerate certification; reduced SW requirements set and simplified verification via MIL/SIL/HIL testing — estimated 8+ months schedule gain.
- Decided to outsource SW verification to a Canadian partner, leveraging government subsidies to expand capacity within tight budget constraints.
- Owned toolchain strategy and tool qualification decisions across all SW projects.
- Set up a CI/CD environment with a qualified toolchain for aeronautical certification; implemented Agile workflow across the team.
- Scaled SW workflows and processes through rapid company growth from 15 to 130 employees over 5 years.
- Defined the overall multi-layer SW architecture (AUTOSAR-based) across all embedded SW projects (DAL-C/D), ensuring homogeneity, portability and modularity.
- Defined SW communication protocols and authored ICD documentation for CAN and RS-485.
- Defined HW/SW interfaces and authored related HIS documentation.
- Validated MCU selection for multiple projects.
- Interfaced with Safety, System, Item and HW teams to ensure proper SW integration and feature alignment.
- Developed safety-critical SW end-to-end for ESS, including requirements, architecture, code and certification documentation compliant with DO-178C.
- Developed Energy Flow Counter SW through PDR and progressed towards CDR.
- Designed and implemented a TDMA communication protocol over RS-485 between battery and ESS master.
- Developed and operated test benches for HIL and on-board SW validation.
Conax & NagraVision (Kudelski Group) · Oslo, Norway / Lausanne, Switzerland
Global leader in digital security, offering advanced content protection and cryptographic solutions for the media and technology sectors.
- Developed the Conax Lynx security application end-to-end — cryptographic integration, secure processor, content protection — deployed with Canal Digital.
- Took sole ownership of the migration from card-based to cardless for Conax Contego after the technical lead's departure; drove design, implementation, integration and delivery to production.
- Designed and integrated secure components (AES, RSA) for STB platforms, contributing to Kudelski's content protection product line.
- Completed Side Channel Analysis & Fault Injection training (Riscure, 2015) applied directly to hardening implemented solutions.
Education
EPFL, Lausanne, Switzerland
ALaRI (USI / ETHZ / Polimi), Lugano, Switzerland
HES-SO Valais, Sion, Switzerland