diff --git a/mbed-tls-framework-restricted-ci-testing.yaml b/mbed-tls-framework-restricted-ci-testing.yaml
new file mode 100644
index 0000000..5b637b5
--- /dev/null
+++ b/mbed-tls-framework-restricted-ci-testing.yaml
@@ -0,0 +1,62 @@
+- job:
+    name: mbed-tls-framework-restricted-ci-testing
+    description: 'Framework CI testing job'
+    project-type: multibranch
+    disabled: false
+    prune-dead-branches: true
+    days-to-keep: 60
+    num-to-keep: 1000
+    script-path: tests/.jenkins/Jenkinsfile
+    properties:
+      - raw:
+          xml: |
+            <org.jenkinsci.plugins.workflow.libs.FolderLibraries plugin="workflow-cps-global-lib@2.9">
+              <libraries>
+                <org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+                  <name>mbedtls-test</name>
+                  <retriever class="org.jenkinsci.plugins.workflow.libs.SCMSourceRetriever">
+                    <scm class="org.jenkinsci.plugins.github_branch_source.GitHubSCMSource" plugin="github-branch-source@2.9.1">
+                      <credentialsId>mbedtls-github-token</credentialsId>
+                      <repoOwner>Mbed-TLS</repoOwner>
+                      <repository>mbedtls-test</repository>
+                      <repositoryUrl>https://github.com/Mbed-TLS/mbedtls-test.git</repositoryUrl>
+                      <traits>
+                        <org.jenkinsci.plugins.github__branch__source.SSHCheckoutTrait>
+                          <credentialsId>mbedtls-github-ssh</credentialsId>
+                        </org.jenkinsci.plugins.github__branch__source.SSHCheckoutTrait>
+                      </traits>
+                    </scm>
+                  </retriever>
+                  <defaultVersion>staging/pr-ci-testing</defaultVersion>
+                  <implicit>true</implicit>
+                  <allowVersionOverride>true</allowVersionOverride>
+                  <includeInChangesets>true</includeInChangesets>
+                </org.jenkinsci.plugins.workflow.libs.LibraryConfiguration>
+              </libraries>
+            </org.jenkinsci.plugins.workflow.libs.FolderLibraries>
+    scm:
+    - github:
+        api-uri: https://api.github.com
+        credentials-id: mbedtls-github-token
+        repo-owner: Mbed-TLS
+        repo: mbedtls-framework-restricted
+        branch-discovery: no-pr
+        discover-pr-forks-strategy: both
+        discover-pr-forks-trust: nobody
+        discover-pr-origin: both
+        head-filter-regex: 'PR-(1)-(head|merge)'
+        status-checks:
+          skip: true
+          skip-branch-source-notifications: true
+        property-strategies:
+          all-branches:
+          - pipeline-branch-durability-override: performance-optimized
+          - suppress-scm-triggering:
+              suppression-strategy: suppress-nothing
+              branch-regex: '^$'
+        shallow-clone: true
+        do-not-fetch-tags: true
+        submodule:
+          disable: true
+        ssh-checkout:
+          credentials: mbedtls-github-ssh