Automotive hub

Software-defined vehicles, OTA, and supplier-system modernization for automotive OEMs and suppliers.

Software-defined vehicle platforms, OTA update infrastructure, ADAS data pipelines, and the IATF 16949 and ISO 26262 discipline the work has to survive.

What we see in Automotive.

Automotive technology programs have crossed a structural threshold. The vehicle is now a software platform with a powertrain attached, and every OEM and tier-1 supplier in the industry is trying to operate a software organization with a manufacturing organization’s decision cadence. The expensive failures aren’t in the autonomy stack; they’re in the OTA campaign that bricked a fleet, the supplier portal that can’t produce IATF 16949 evidence on demand, and the dealer-system migration that misjudged the dealer-network change-management work.

We work with OEMs, tier-1 and tier-2 suppliers, EV-native firms, and mobility-platform operators on the engineering decisions where the safety frame, the cybersecurity frame, and the production cadence all have to align. ISO 26262 functional safety governs the embedded side. UNECE WP.29 R155/R156 governs vehicle cybersecurity and software-update management. AUTOSAR governs the platform interfaces. The supplier-quality side runs through IATF 16949 and, where aerospace overlap exists, AS9100.

On AI and data, ADAS and AV programs generate the most operational data the company has ever managed. The realistic engineering problem is the data lifecycle: ingest, label, version, replay, and the reproducibility discipline that lets a finding from a vehicle in the field become a fix in the next OTA without breaking the safety case.

Where we plug in for Automotive.

01

Software-defined vehicle platforms

In-vehicle compute architecture, AUTOSAR Adaptive integration, and the platform-team operating model that lets a vehicle program ship software at a cadence the supplier base can actually support.

Software-defined-vehicle platform work is the architectural and operating-model discipline that determines whether a vehicle program can release software at a cadence the supplier base can support, or whether each release becomes a six-month integration event. The work begins with a current-state E/E architecture assessment, an AUTOSAR Adaptive and Classic split decision, and an honest evaluation of the platform-team operating model against the cadence the program is targeting. A senior consultant produces a domain-controller decomposition aligned to the vehicle's functional domains, an AUTOSAR integration design that defines the supplier-OEM responsibility split clearly, a software-platform release model that synchronizes domain-controller releases with vehicle integration events, and an ASPICE-aligned engineering process that survives a customer audit. Deliverables include the platform architecture decision record, the supplier-collaboration operating model, the release-cadence design, and a roadmap for moving from the current per-program platform to a reusable vehicle-software platform. Successful outcomes look like a vehicle program that delivers a software release inside its planned window without a tier-1 escalation, an over-the-air update path that the platform supports natively rather than as an add-on, and a supplier base that aligns to the OEM's cadence rather than constraining it. An engagement typically runs twelve to twenty weeks, embedded with the chief software officer's organization, vehicle-program engineering, and the tier-1 platform suppliers.

02

OTA update infrastructure

WP.29 R156-aligned software-update management. Campaign design, rollback posture, and the fleet-telemetry work that turns a campaign into a controllable operation rather than a hope.

Over-the-air update infrastructure under UNECE WP.29 R156 is the program-and-platform discipline of treating each software update as a controllable operation with rollback, telemetry, and regulatory evidence, rather than a deployment hope. The work begins with a current-state OTA capability assessment, an R156 software-update-management-system gap analysis, and a fleet-telemetry inventory that determines what the OEM can actually observe post-deployment. A senior consultant produces an SUMS process design aligned to R156 requirements, a campaign-management architecture that supports staged rollouts with defined rollback criteria, a telemetry-and-observability design that catches a bad campaign before it propagates beyond a containable cohort, and a cybersecurity-management-system integration aligned to R155 and ISO/SAE 21434. Deliverables include the SUMS process documentation that the type-approval authority will accept, the campaign-architecture decision record, the rollback-and-recovery runbooks, and a fleet-telemetry roadmap that supports both safety and customer-experience use cases. Successful outcomes look like a campaign that staged-rolls cleanly with measurable error-rate gating between cohorts, a rollback exercise actually tested rather than documented, and a type-approval review that closes without R156 findings. An engagement typically runs ten to sixteen weeks, embedded with vehicle cybersecurity, the connected-vehicle platform team, regulatory affairs, and the cloud platform engineering function.

03

ADAS / AV data pipelines

Data ingest from fleet vehicles, labeling pipelines, scenario libraries, and the reproducibility discipline that lets the safety case survive a regulator question two years after the build.

ADAS and AV data-pipeline work is the architectural discipline that produces a safety case the regulator will read two years after the build. The work begins with a current-state data-pipeline assessment from fleet ingest through labelling to scenario libraries, an ISO 21448 SOTIF and ISO 26262 functional-safety alignment review, and a reproducibility audit that determines whether a model trained eighteen months ago can be re-derived from source data on demand. A senior consultant produces a fleet-ingest architecture with privacy-preserving data handling appropriate to General Data Protection Regulation (GDPR) and emerging US state-level vehicle-data statutes, a labelling-pipeline operating model with quality-assurance and inter-rater-reliability discipline, a scenario-library architecture that supports both replay and synthetic generation, and an experiment-tracking system that captures the lineage from raw clip to deployed model. Deliverables include the data-pipeline architecture decision record, the labelling operating model, the scenario-library design, and a safety-case-evidence framework that ties pipeline artifacts to the assertions the safety case makes. Successful outcomes look like a regulator query about a model decision in a three-year-old build that the OEM can answer with reproduced data and reproduced training, a labelling cycle time materially reduced through process discipline rather than vendor change, and a safety-case package that survives a type-approval or NHTSA review. An engagement typically runs twelve to twenty weeks, embedded with the AV/ADAS engineering organization, functional safety, the data-platform team, and regulatory affairs.

04

Dealer-system modernization

DMS replatforming, dealer-portal modernization, and the change-management work that determines whether a dealer-network transition lands or stalls.

Dealer-system modernization is the change-management discipline that determines whether a DMS replatforming or dealer-portal rebuild lands across a fragmented dealer network or stalls at the second pilot. The work begins with a dealer-network segmentation by size, ownership structure, and current-platform footprint, a current-state DMS-and-portal capability assessment, and a stakeholder map that includes the OEM's field-operations team, the dealer-council leadership, and the major dealer-group IT functions. A senior consultant produces a deployment-strategy decision record that handles the heterogeneity of the dealer base, a dealer-portal architecture aligned to the OEM's customer-data and lead-management strategy, a DMS-integration design that survives the variations across the major DMS providers, and a change-management plan grounded in actual dealer adoption discipline rather than OEM-side assumptions. Deliverables include the deployment-strategy decision record, the portal-architecture decision record, the DMS-integration patterns, and a dealer-engagement playbook for the field-operations team. Successful outcomes look like a dealer-portal launch that the dealer council accepts, a DMS-integration backlog that converges rather than expanding, and a customer experience consistent across the dealer network in the digital handoffs that the OEM controls. An engagement typically runs ten to sixteen weeks, embedded with the OEM's field-operations team, the customer-experience platform organization, and a representative dealer-advisory group.

05

EV charging-network integration

OCPP and Plug & Charge integration, charging-network roaming, and the back-office platform work for fleet and consumer EV programs.

EV charging-network integration is the back-office, protocol, and ecosystem-partnership work that determines whether a charging-network program produces a usable customer experience or a fragmented one. The work begins with a target-network footprint assessment (proprietary, partner, and roaming), an OCPP and OCPI capability audit across the charge-point management system and the e-mobility-service-provider integrations, and a Plug & Charge readiness review aligned to ISO 15118-20. A senior consultant produces an OCPP-2.0.1 charge-point-management architecture, a Plug & Charge implementation design with the public-key-infrastructure decisions documented, an OCPI-based roaming integration pattern with the partner-onboarding operating model, and a fleet-billing back-office that supports both consumer and fleet customer segments. Deliverables include the charging-network architecture decision record, the protocol-implementation design, the roaming-partner playbook, and a measurement framework that ties uptime, session-success rate, and customer-NPS to platform investment. Successful outcomes look like a charge-session-success rate sustained at the target band, a Plug & Charge experience that works across the partner roaming network, and a fleet-billing platform the commercial team can configure for new customer programs without engineering work. An engagement typically runs ten to fourteen weeks, embedded with the connected-vehicle organization, the charging-network business unit, and the cloud platform engineering team.

06

Supplier portal modernization

IATF 16949 evidence pipelines, PPAP automation, and the supplier-data-contract discipline that prevents a customer audit from becoming a six-week internal fire drill.

Supplier-portal modernization for an automotive OEM or tier-1 supplier is the data-contract and audit-evidence discipline that determines whether a customer audit becomes a six-week internal fire drill or a controlled response. The work begins with a current-state IATF 16949 evidence audit, a PPAP and APQP cycle-time baseline, and a supplier-data-contract assessment across the supplier base. A senior consultant produces a supplier-portal target architecture that consolidates PPAP, APQP, change management, and supplier scorecards, a PPAP-automation design that produces audit-grade evidence packages on customer demand, an integration design that connects the supplier portal to the QMS, Enterprise Resource Planning (ERP), and engineering-change platforms, and a supplier-onboarding operating model that manages the data-contract cadence. Deliverables include the portal architecture decision record, the PPAP-automation design, the integration patterns, and a supplier-engagement playbook for the supplier-quality function. Successful outcomes look like a customer source-audit closed without major findings, a PPAP cycle time materially reduced and sustained across the supplier base, and a supplier-quality function that operates the portal rather than working around it. An engagement typically runs ten to fourteen weeks, embedded with supplier quality, purchasing, the QMS team, and the integration-platform engineering function.

Regulatory and compliance landscape.

Automotive technology programs are governed by overlapping safety, cybersecurity, and quality frameworks. We design deliverables to align with the frameworks that govern the work.

  • IATF 16949 →

    Automotive quality management system standard. Required by most OEMs of their tier-1 and tier-2 suppliers.

  • AS9100 →

    Aerospace and defense quality management system standard. Relevant where automotive suppliers also serve aerospace customers.

  • FMVSS →

    Federal Motor Vehicle Safety Standards. The US baseline safety frame for vehicles and equipment.

  • ISO 26262 →

    Functional safety standard for road vehicle electrical and electronic systems. ASIL classification and the safety lifecycle.

  • UNECE WP.29 R155 / R156 →

    Vehicle cybersecurity management system (R155) and software update management system (R156) regulations under UNECE WP.29.

  • AUTOSAR →

    Automotive Open System Architecture. Classic and Adaptive platform standards for in-vehicle software.

  • ISO/SAE 21434 →

    Road vehicles cybersecurity engineering standard. The companion engineering standard to WP.29 R155.

Prior engagements.

European premium OEM, driver-assist program
Cut HIL integration-defect leakage by half on the ADAS program.
Challenge

ASPICE-aligned software platform consolidation for ADAS

The Automotive client's ADAS program was leaking integration defects into hardware-in-the-loop benches at a rate the program manager could not defend, with three tier-one suppliers each on different software delivery models and ASPICE Capability Level evidence inconsistent across the supply base. ISO 21434 cybersecurity work was bolted on rather than built into the V-model.

Approach

Barrier restructured the supplier software delivery model around Automotive SPICE Level 3, harmonized the requirements management and configuration management practices across the three suppliers, and embedded the ISO 21434 threat analysis and risk assessment into the system definition phase. We wrote the assessor-facing evidence pack and rehearsed the formal SPICE assessment with the lead.

Results

HIL integration-defect leakage came in at roughly half the prior baseline. Thirteen-month engagement, embedded with the platform software team.

North American EV pure-play, two-vehicle lineup
Pre-cleared first cell chemistry with the notified body.
Challenge

Battery traceability platform for EU Battery Regulation

The Automotive client faced the EU Battery Regulation 2027 deadline for the digital battery passport with a supplier base that had never been asked for cradle-to-grave material declarations, no internal data model for the regulation's data classes, and no agreed notified-body relationship. The vehicle program manager could not slip the European launch.

Approach

Barrier built the digital battery passport data model against the regulation's published data classes, stood up the supplier capture flows through a vendor portal integrated with the existing PLM, and wrote the conformity assessment package the notified body would re-examine. We rehearsed the audit with the cell supplier and walked the homologation team through the GS1 carbon-footprint methodology.

Results

The first cell chemistry pre-cleared with the notified body inside the program window. Ten-month engagement, four-stream delivery.

Top-5 global tier-1 powertrain supplier
Eliminated recurring BOM-out-of-sync escapes that had triggered customer 8Ds.
Challenge

PLM-to-ERP master data harmonization for tier-1 supplier

The Automotive client had been living with recurring BOM-out-of-sync escapes between Teamcenter and SAP that had triggered customer 8D reports across three OEM accounts, with engineering change orders being reworked manually after the fact and the quality function carrying the cost. The plant teams had lost confidence in the master data.

Approach

Barrier rebuilt the item master harmonization between Teamcenter and SAP through a governed change pipeline, redesigned the engineering change governance to fail closed when classification or routing data was missing, and wrote the data quality scorecard the quality director would publish monthly. We retired the manual reconciliation workbook the program managers had been keeping in parallel.

Results

The BOM-out-of-sync escapes stopped surfacing in the OEM 8D queue. Eleven-month engagement across three plants and the central engineering office.

Ready to scope an Automotive engagement?

A 20-minute brief on the problem and we’ll come back with what we’d actually do.

Schedule a consultation →