diff --git a/mbed-tls-restricted-pr-ci-testing.yaml b/mbed-tls-restricted-pr-ci-testing.yaml
new file mode 100644
index 0000000..f800710
--- /dev/null
+++ b/mbed-tls-restricted-pr-ci-testing.yaml
@@ -0,0 +1,60 @@
+- job:
+    name: mbed-tls-restricted-pr-ci-testing
+    description: 'mbedtls CI testing job'
+    project-type: multibranch
+    prune-dead-branches: true
+    script-path: tests/.jenkins/Jenkinsfile
+    properties:
+      - raw:
+          xml: |
+            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
+              <libraries>
+                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+                  <name>mbedtls-test</name>
+                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
+                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
+                      <repoOwner>Mbed-TLS</repoOwner>
+                      <repository>mbedtls-test</repository>
+                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
+                      <traits>
+                        <org.jenkinsci.plugins.github__branch__source.BranchDiscoveryTrait>
+                          <strategyId>1</strategyId>
+                        </org.jenkinsci.plugins.github__branch__source.BranchDiscoveryTrait>
+                        <org.jenkinsci.plugins.github__branch__source.OriginPullRequestDiscoveryTrait>
+                          <strategyId>2</strategyId>
+                        </org.jenkinsci.plugins.github__branch__source.OriginPullRequestDiscoveryTrait>
+                        <org.jenkinsci.plugins.github__branch__source.ForkPullRequestDiscoveryTrait>
+                          <strategyId>2</strategyId>
+                          <trust class="org.jenkinsci.plugins.github_branch_source.ForkPullRequestDiscoveryTrait$TrustPermission"/>
+                        </org.jenkinsci.plugins.github__branch__source.ForkPullRequestDiscoveryTrait>
+                      </traits>
+                    </scm>
+                  </retriever>
+                  <defaultVersion>staging/pr-ci-testing</defaultVersion>
+                  <implicit>true</implicit>
+                  <allowVersionOverride>true</allowVersionOverride>
+                  <includeInChangesets>true</includeInChangesets>
+                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+              </libraries>
+            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
+    scm:
+    - github:
+        api-uri: https://api.github.com
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: mbedtls-restricted
+        repository-url: https://github.com/Mbed-TLS/mbedtls-restricted.git
+        branch-discovery: no-pr
+        discover-pr-origin: both
+        head-filter-regex: 'PR-(758|759|850|906|916|919)-.*'
+        property-strategies:
+          all-branches:
+          - pipeline-branch-durability-override: performance-optimized
+          - suppress-scm-triggering: true
+        submodule:
+          disable: false
+          recursive: true
+          tracking: false
+          parent-credentials: false
+        ssh-checkout:
+          credentials: mbedtls-github-ssh