From what I’ve seen, people start off by working with the code until they become trusted enough to be offered the job. More specifically they have contributed code and have been involved in the community to the point where they have knowledge+expertise of a subsystem such that they are as capable or more than the current/prior maintainers.