TL;DR: MICA Controls has been engineering reformer burner management systems (BMS) in Canada since 2012, developing a functional safety approach under CSA B149.3 Annex I and IEC 61511 that outperforms traditional prescriptive designs. By eliminating unnecessary equipment in high-heat environments, MICA Controls delivers safer, more reliable, and dramatically more cost-effective BMS solutions across fertilizer, chemical, and oil and gas applications.
A reformer is one of the most demanding environments in industrial processing—hundreds of burners, process pipes packed tightly in close proximity to burner equipment, temperatures exceeding 80°C near the floor, and a shutdown that can cost an operator up to $2 million in lost production for every 24 hours offline. Designing a burner management system for that environment requires more than code knowledge. It requires an understanding of reformers.
That distinction is at the core of what MICA Controls has built over the past decade. The company's approach to reformer BMS didn't emerge from a textbook. It was forged through real-world engineering challenges, beginning with a single project that ultimately changed how MICA designs safety systems for complex fired equipment across Canada.
In 2012, MICA Controls was engaged by a global oil and gas company to support safety instrumented system (SIS) opportunities at one of their major facilities. During that engagement, the client posed a different question: could MICA help with a burner management system for reformers at their refinery, as part of a carbon capture project?
Another engineering firm was handling the carbon capture side. But because that project involved modifying burners and changing operating conditions it triggered a code compliance requirement under CSA B149.3, Canada's standard for fuel-related components on gas-fired process equipment. The problem was that the reformers in question had never been brought into compliance with the code. Without a previously approved baseline to fall back on, there was no path to grandfather their existing configuration.
MICA Controls was brought in to redesign the BMS from the ground up. It was a formative project. Working with the Authority Having Jurisdiction (AHJ), MICA established that IEC 61511—the international functional safety standard for safety instrumented systems in the process industries—could serve as a method of demonstrating equivalence to the prescriptive requirements of CSA B149.3. That early experience laid the groundwork for everything that followed.
CSA B149.3 includes prescriptive drawings that illustrate how fuel trains should be built. Many BMS providers treat those drawings as the definitive specification and build accordingly. The result is a design that places flame scanners and individual fuel safety shutoff valves on each burner—a logical approach on paper, but a serious liability in practice.
A reformer with 100 to 300 burners requires an equivalent number of flame scanners, valves, and associated instrumentation. Each one of those devices needs to be installed close to the burners, in an area that already has a reformer tube and its associated process piping running alongside it. The space is congested by design. Layering in hundreds of additional components transforms a crowded but functional process area into a logistical maze.
The thermal environment compounds the problem. Near the burners, ambient temperatures regularly exceed 80°C. Sensitive electronics—flame scanners, solenoid valves, transmitters—are not designed to operate reliably under sustained heat exposure at that level. The failure rate climbs. So does the rate of spurious trips: safe shutdowns triggered not by a genuine process hazard, but by a device that failed in the heat. At roughly $2 million in lost production per 24-hour shutdown, spurious trips are not a minor inconvenience. They are a significant safety and operational liability.
The prescriptive approach doesn't just cost more to build—estimates for full prescriptive-compliant reformer BMS designs run from $30 to $70 million—it actively increases the probability of unnecessary shutdowns. MICA Controls recognized early that following the drawings without understanding the operating environment was not a path to safety. It was a path to complexity and unreliability.
Fertilizer reformers introduce a structural constraint that rules out many of the design choices that competitors rely on. In oil and gas or chemical reformer applications, individual burner components can often be accessed and serviced without major disassembly. Fertilizer reformers are different.
The reformer tubes in a fertilizer application are installed as an integrated assembly—a "harp"—that includes the tubes, manifolds, and collectors. When tubes require replacement or service, the entire harp must come out as a unit. That means removing the roof of the reformer and lifting the complete assembly out of the firebox.
Now consider what it means to install a prescriptive-compliant BMS on that kind of reformer. Flame scanners mounted on 50% or more of the burners, individual fuel safety valves interfacing with each burner, all of it woven into the same process area that needs to be completely dismantled every few years for tube replacement.
Some vendors have responded to this constraint by constructing platforms in the penthouse of the reformer—elevated steel structures that house the BMS hardware above the firebox and route connections down to each burner. The cost of that structural addition is substantial, and according to MICA Controls' analysis, completely unnecessary if the system is designed with the right regulatory framework from the start.
MICA Controls' reformer BMS designs are built around Annex I of the CSA B149.3 2020 and 2025 codes—a performance-based pathway that MICA helped develop in collaboration with a team of industry experts. Rather than mandating specific hardware configurations, Annex I requires that a BMS achieve defined safety performance criteria, using IEC 61511 as the analytical framework for demonstrating that performance.
This is not a shortcut or a workaround. It is a more rigorous approach. Functional safety analysis under IEC 61511 requires a systematic evaluation of every credible hazard scenario, a quantification of required risk reduction, and a demonstration that the implemented system achieves that reduction. It considers the full facility risk matrix—not just the fired equipment in isolation.
The practical effect is a simpler, more targeted system. MICA Controls designs eliminate the equipment that adds complexity without sacrificing safety, concentrating protection where the risk analysis shows it is actually needed. Fewer devices in the hot zone means fewer points of failure, fewer spurious trips, and a system that can be maintained and serviced without structural conflict.
This approach also addresses a pattern MICA has encountered repeatedly on legacy reformers: BMS systems that were progressively degraded by well-intentioned but poorly informed modifications. Many of these reformers were built in the 1950s through 1990s with Factory Mutual-approved BMS systems that reflected the design intent of the original process licensers. Over subsequent decades, those systems were stripped out and replaced—often by parties who didn't fully understand the reformer's operating logic—with configurations that, in some cases, reduced rather than enhanced safety.
MICA Controls' response has been to recover that original intent and implement it within a modern safety system architecture.
Code knowledge alone is insufficient for reformer BMS work. CSA B149.3 specifies what compliance looks like in general terms. It does not explain how a specific reformer was designed to operate, what the original safety intent was, or why a prescriptive solution that works in theory will fail in a 300-burner reformer.
MICA Controls brings more than regulatory expertise to every project. The company's work across fertilizer, chemical, oil and gas, and ethylene cracker applications has produced a depth of operational understanding that informs every design decision—from how the fuel train is configured to how the system will behave during a tube replacement outage years down the road.
The difference between a BMS that is technically compliant and one that is genuinely safe often comes down to whether the engineering team understood the process. That is the distinction MICA Controls has built its reformer practice around—and the reason operators across Canada continue to bring them in when the standard answer isn't enough.
To learn more about MICA Controls' reformer BMS solutions, contact the team directly.